search

misskey-dev / misskey

🌎 A completely free and open interplanetary microblogging platform 🚀
https://misskey-hub.net/
GNU Affero General Public License v3.0
9.99k stars 1.36k forks source link

Email on signup #7007

Closed skid9000 closed 1 year ago

skid9000 commented 3 years ago

Hello,

i'm dealing with a lot of spambot coming to our misskey instance, the obvious response would be "use re/hCaptcha" which i would respond no because the ethics of this instance isn't compatible with theses 3rd parties tools.

So is it possible to get the option as an admin to require new users to provide an email address and verify it ? (the instance send an email with a token, etc...).

Obviously some bots are sophisticated enough to pass that check but that's better than nothing.

okpierre commented 3 years ago

@skid9000 go to www.example.com/instance/settings and configure email server configuration and smtp server configuration

skid9000 commented 3 years ago

hm, yeah it's configured, but that doesn't solve my issue :thinking:

kazu0617 commented 1 year ago

If the bot server and the mail server are hooked up, I don't think it would work because they could be breached at that point. You can create countless email addresses as long as you have a server... I don't think it is necessary to remove Capcha, even signing up, just for third party tools.

skid9000 commented 1 year ago

This issue has been fixed, i've forgot to close it.

You can create countless email addresses as long as you have a server...

I litteraly said in my first message :

Obviously some bots are sophisticated enough to pass that check but that's better than nothing.

I never said this would fix spambot issues entierly, but it would reduce it. (which is better than nothing)

Also just for info, both hCaptcha and reCaptcha are illegal to use in Europe due to GDPR and schrems II (which prohibits the use of software made by USA companies), so for European instances manager, it is a legal necessity to be able to disable them.

Unless there is an alternative made by an European company which would be implemented by Misskey, there is no other legal solution to solve the problem entierly.