Tag Info

New answers tagged

0

Here's the answers: 1. Yes 2. No 3. No A captcha does cover a missing csrf token but it doesnt work the other way around so wherever you need to protect against automation use captcha


8

To answer a bit more explicitly: Do I need to use captcha if I am using AntiForgeryToken in an MVC application. If automated submissions are a problem then yes. Does AntiForgeryToken prevents automated form submission? No. A CSRF token basically ensures that a user visits a page (eg. the one which contains the form) before another action takes ...


5

Do I need to use captcha if I am using AntiForgeryToken in an MVC application? A CAPTCHA is a type of challenge-response test used in computing to determine whether or not the user is human. (...) CAPTCHAs are used to prevent bots from using various types of computing services or collecting certain types of sensitive information. - Wikipedia Cross-Site ...


2

CAPTCHA are not necessarily needed nor or they the only solution. Defense in depth means using multiple tactics, layers, and techniques. If you have information you can try to determine the likelihood that the client talking to your web app is (A) a human and (B) a human you want accessing your site. There are reputation services out there that can provide ...


1

The answer overall is: you can distinguish between human and spambots based on the spambot developers' willingness to attack you specifically. There are two categories of defences essentially: bot/human distinction and methods to increase the cost of carrying out attacks. Distinguishing bots from humans A lot of alternative techniques to CAPTCHAs in the ...



Top 50 recent answers are included