Hi devs,
We have been getting reports recently of people getting a lot of SPAM in
their public XWiki instances, even if they had the CAPTCHA module [1]
enabled on their comments/registration pages.
These past 2 days I`ve been investigating the current status of the CAPTCHA
module and what is the state of the art in fighting SPAM.
I have produced the following document [2] that I would like you to have a
look at and tell me what you think and/or what is your experience with
XWiki's CAPTCHA module and with fighting SPAM in general.
TL;DR: I would like to propose that we move to Google's new NO CAPTHA
reCAPTCHA as the default CAPTCHA solution and that we implement a
configurable back-end that allows admins to easily switch between CAPTCHA
engines/services.
Thanks,
Eduard
----------
[1]
http://extensions.xwiki.org/xwiki/bin/view/Extension/Captcha+Module
[2]
http://design.xwiki.org/xwiki/bin/view/Proposal/CAPTCHAinvestigation70