Дилян Палаузов writes: > The problem is that this simplicity allows misuse: somebody can > trigger via HTTP requests many account registrations for random > email addresses.
This is a known problem. > To mitigate this misuse pattern, the procedure to create new > accounts over web interface should be made more complex, e.g. by > utilizing captcha. This has been discussed many times, and I know patches have been published. I think the general feeling has been that for the general population of users making things more complicated pushes many users over the edge. It's also known that while not all spammers use ML techniques, so captcha can be effective, ML defeats most captchas more easily than humans do. So that has not been a high priority for the core team. > Does somebody already have some patches, doing such things, which > patches can be shared? You should be able to find both captcha and recaptcha patches in the GitLab tracker (check for "closed" issues as well!), and more references in both the Mailman 2 and Mailman 3 Users archives as well as in the archives of this list. Another possibility would be to push the responsibility on to the big providers by requiring a social auth login. -- GNU Mailman consultant (installation, migration, customization) Sirius Open Source https://www.siriusopensource.com/ Software systems consulting in Europe, North America, and Japan _______________________________________________ Mailman-Developers mailing list -- [email protected] To unsubscribe send an email to [email protected] https://mail.python.org/mailman3/lists/mailman-developers.python.org/ Mailman FAQ: https://wiki.list.org/x/AgA3 Security Policy: https://wiki.list.org/x/QIA9
