New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[v0/v1] Discuss faucet security concerns #4

Open

2 tasks

waymobetta opened this issue Feb 8, 2024 · 1 comment

Assignees

Milestone

waymobetta commented Feb 8, 2024 •

edited

Loading

Before launching, we'll need to discuss security concerns regarding:

rate-limiting
captcha
notoriously bad IP blocking --> https://getipintel.net/

TODO:

review
incorporate feedback into [v0] Develop front-end + review #3 which will carry over into [v1] Develop front-end + review #6

waymobetta added this to the v0 milestone

waymobetta changed the title ~~Discuss faucet security concerns~~ [v0/v1] Discuss faucet security concerns

waymobetta modified the milestones: v0, v1

waymobetta assigned kristovatlas, zivkovicmilos and waymobetta

kristovatlas commented Feb 8, 2024

Here are what a few other sites are doing:

https://faucet.polygon.technology/: CloudFlare CAPTCHA
https://sepolia-faucet.pk910.de/: ReCAPTCHA
https://faucet.polygon.technology/: Connect to Discord account
https://www.bnbchain.org/en/testnet-faucet: hCAPTCHA
https://core.app/tools/testnet-faucet/?subnet=c&token=c: ReCAPTCHA
https://solfaucet.com/: Rate limited

I would recommend starting with one of the major CAPTCHA providers such as CloudFlare, ReCAPTCHA, or hCAPTCHA. This might be good-enough.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment