Johannes Rohr via Mailman-users writes:
in mailman installed in venv is there really no canonical way of integrating a captcha into postorius' subscription and account registration forms? We are increasingly getting hammered by spambots, and a captcha would seem like a simple and effective solution.
Nothing canonical, but a quick search of this list shows a few threads leading to this issue: https://gitlab.com/mailman/django-mailman3/-/work_items/33
If you have evidence that captchas work well, please let us know. The modern reCAPTCHA, however, mostly seems to be AI vendors training their models. Our own experience is that captchas slow the bots a bit and slow users more than a little: https://lists.mailman3.org/archives/list/mailman-users@mailman3.org/message/... which is why we are willing to let others do the work of integrating a solution. I don't recall seeing reports of successful use, only a few references to patches. None of those who have patches are willing to volunteer to integrate, so they don't seem terribly excited either.[1]
These bots do seem to be on the increase. It would help if we had data on where they're coming from and what addresses they're trying to sign up.
Footnotes: [1] I understand that a lot of people perceive substantial barriers to contribution. and that's fine. My point is that people who have a feature they think is really helpful for others often do get excited enough to do the work, and we're seeing none of that.
-- GNU Mailman consultant (installation, migration, customization) Sirius Open Source https://www.siriusopensource.com/ Software systems consulting in Europe, North America, and Japan