[v0/v1] Discuss faucet security concerns - Githubissues

gnolang / faucet-hub

Faucet frontend for Gno chains

https://faucet.gno.land

4 stars 3 forks source link

[v0/v1] Discuss faucet security concerns #4

Open waymobetta opened 9 months ago

waymobetta commented 9 months ago

Before launching, we'll need to discuss security concerns regarding:

rate-limiting
captcha
notoriously bad IP blocking --> https://getipintel.net/

TODO:

[ ] review
[ ] incorporate feedback into #3 which will carry over into #6

kristovatlas commented 9 months ago

Here are what a few other sites are doing:

https://faucet.polygon.technology/: CloudFlare CAPTCHA
https://sepolia-faucet.pk910.de/: ReCAPTCHA
https://faucet.polygon.technology/: Connect to Discord account
https://www.bnbchain.org/en/testnet-faucet: hCAPTCHA
https://core.app/tools/testnet-faucet/?subnet=c&token=c: ReCAPTCHA
https://solfaucet.com/: Rate limited

I would recommend starting with one of the major CAPTCHA providers such as CloudFlare, ReCAPTCHA, or hCAPTCHA. This might be good-enough.