> A visitor from TOR is extraordinarily more likely to be abusive. It makes total sense to put up extra barriers, which is still short of blocking TOR users altogether, which is also fair for webmasters who don't want to deal with it.
And why is that again? I want to understand that argument.
In case of DDoS scenario: Well, too late, traffic already served and server already done the workload.
In case of password brute forcing: Well, then implement a latency, or cryptographical challenge to delay it more efficiently.
In case of "evil" human: Well, if a human can get past your security so easily, then your approach to security through obfuscation might be wrong.
So, again, what is the scenario where a captcha helps you to avoid being "attacked" by malicious actors?
And why is that again? I want to understand that argument.
In case of DDoS scenario: Well, too late, traffic already served and server already done the workload.
In case of password brute forcing: Well, then implement a latency, or cryptographical challenge to delay it more efficiently.
In case of "evil" human: Well, if a human can get past your security so easily, then your approach to security through obfuscation might be wrong.
So, again, what is the scenario where a captcha helps you to avoid being "attacked" by malicious actors?