Automattic / jetpack

Security, performance, marketing, and design tools — Jetpack is made by WordPress experts to make WP sites safer and faster, and help you grow your traffic.
https://jetpack.com/
Other
1.58k stars 799 forks source link

Sharing: switch from reCAPTCHA v2 to invisible reCAPTCHA #6610

Open jeherve opened 7 years ago

jeherve commented 7 years ago

The email sharing button includes an option to protect the email form with reCAPTCHA: https://jetpack.com/support/sharing/#captcha

In #2152, we updated that form to use reCAPTCHA v2.

Since Google now offers a new version of reCAPTCHA, dubbed invisible reCAPTCHA, we could switch to this new API:

Related #448

lancewillett commented 6 years ago

Can you add a bit more of the "why"? Is it faster, more secure, or otherwise a better user experience?

jeherve commented 6 years ago

It's a much better user experience, because the form is not shown to real readers most of the time: https://www.google.com/recaptcha/intro/invisible.html

It only appears when reCAPTCHA has doubts.

stale[bot] commented 5 years ago

This issue has been marked as stale. This happened because:

No further action is needed. But it's worth checking if this ticket has clear reproduction steps and it is still reproducible. Feel free to close this issue if you think it's not valid anymore — if you do, please add a brief explanation.

snapalot commented 5 years ago

We're using reCAPTCHA v2 with Jetpack's share via email. We have received feedback that people with vision apairments have trouble seeing enough detail on the photos that Google present, like "click on all the images with shopfronts" etc. Switching to the invisible reCAPTCHA would solve this issue.

imwithsam commented 5 years ago

Would love to see compatibility with reCAPTCHA v3 as well!

https://developers.google.com/recaptcha/docs/v3

stale[bot] commented 5 years ago

This issue has been marked as stale. This happened because:

No further action is needed. But it's worth checking if this ticket has clear reproduction steps and it is still reproducible. Feel free to close this issue if you think it's not valid anymore — if you do, please add a brief explanation.

atari2003 commented 4 years ago

This would be an extremely helpful feature to streamline the user experience on the WordPress sites by using ReCaptcha v3. Users are focused on interacting and consuming the content and if we already have the data that they are authenticated users (2FA, commenting logins, etc.) then we should be able to validate they are legit users and use ReCaptcha v3. Also, the majority of our users are on mobile devices and the ReCaptcha v2 experience on mobile is not the best.

stale[bot] commented 4 years ago

This issue has been marked as stale. This happened because:

No further action is needed. But it's worth checking if this ticket has clear reproduction steps and it is still reproducible. Feel free to close this issue if you think it's not valid anymore — if you do, please add a brief explanation.