implement a fallback for when turnstile is down

[jelveh]

cloudflare went down today taking turnstile and our desktop with it! we need to make sure the world doesn't come to an end when CF turnstile is down. Maybe remove captcha altogether when that happens?

[reynaldichernando]

chiming in on this, i remember reading about proof of work thing in the past, where it first run checks on your browser to see if you can solve it = a person

https://anubis.techaro.lol
https://news.ycombinator.com/item?id=43427679

quote from the docs

In most cases, you should not need this and can probably get by using Cloudflare to protect a given origin. However, for circumstances where you can't or won't use Cloudflare, Anubis is there for you.

[ProgrammerIn-wonderland]

I am pretty against anubis, it is trivially bypassible by changing the useragent to contain the string "GoogleBot" and it fails on any browser that isn't extremely mainstream.

[reynaldichernando]

oh wow, that’s not good lol

although, i think whichever fallback we choose, there might be some compromises to make, since it will only apply when cloudflare is down

for example if we remove captcha altogether, it means we will have no protection