[MM3-users] Re: Implement a simple non javascript captcha to mailman

Oct. 4, 2026

      On 2026-10-04 11:04:05 +0200 (+0200), Lars Bjørndal via Mailman-users wrote:
[...]
...
...

A few list administrators have implemented Anubis in front of
MM3 and it works perfectly.

But doesn't that require javascript? Some users, including myself,
are using text based browsers without support for javascript.
[...]
Anubis, by default, avoids forcing non-JS-capable browsers to solve
its challenges. I have it implemented in front of
Postorius/Hyperkitty and am able to browse them fine even with a
console-based browser like Lynx. Yes that means a bot could in
theory bypass Anubis by claiming to be Lynx or similar, but in
practice they all (at least the ones I've seen acting in problematic
ways) pretend to be popular JS-capable graphical browsers instead at
the moment.
Of course, any of this is subject to change. The attacks we've all
been collectively weathering for the past 12-18 months are
constantly evolving, so our mitigations against them have to
continuously evolve as well just to keep up with them.
Jeremy Stanley

[MM3-users] Re: Implement a simple non javascript captcha to mailman

Jeremy Stanley

Of course, any of this is subject to change. The attacks we've all been collectively weathering for the past 12-18 months are constantly evolving, so our mitigations against them have to continuously evolve as well just to keep up with them.