hcaptcha vs Botstop

[TzviyaSiegman]

In researching methods for CAPTCHA, I learned that the free version of hCaptcha and the paid version are completly different tools. I recommend contacting BotStop to learn about the paid version, which might offer an option that has fewer pitfalls than others. They are very open to feedback about accessibility.

[jasonjgw]

I've had some experience with the version of hCaptcha used by Cloudflare, which I assume is the commercial version. There was an option for a person with a disability to register with the vendor to bypass the CAPTCHA challenge, which was otherwise inaccessible to nonvisual users.

Problem 1: to bypass the CAPTCHA, I had to register, thus revealing myself to have a disability.

Problem 2: The bypass process, involving a cookie, didn't work. I eventually identified the reason: I had to turn off or create an exception to browser privacy settings that blocked third-party cookies in order for their cookie to be available on the Web sites that presented the CAPTCHA challenge. In other words, it was necessary to reduce one's privacy protection by manipulating browser settings.

In general, I don't think this is the kind of solution we should be encouraging in our document.

[TzviyaSiegman]

In my converations with botstop, I learned that their goal is to never ask users to solve puzzles. They are extremely open to a11y feedback.

[TzviyaSiegman]

Please also note that cloudflare uses BotStop.