• themoonisacheese@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            2
            ·
            1 year ago

            But they often don’t. I’m still in favor of adding captcha, but the bots we’re seeing are choosing instances without email requirement because it’s easier (and sending an email every millisecond is a good way for the instance to be banned by whatever mail provider it’s going to, making it so that you can’t complete account creation)

            • manitcor@lemmy.intai.tech
              link
              fedilink
              English
              arrow-up
              1
              ·
              1 year ago

              i’ve also been a fan of low bar initial logins then ramping the user into higher forms of auth as they engage with a platform more.