Re: Using Cloudflare as CDN for debian.org website

On 16/06/19 06.26, Steve McIntyre wrote:
> On Sun, Jun 16, 2019 at 05:50:33AM +0700, Bagas Sanjaya wrote:
>> What is your position regarding Cloudflare's reCAPTCHA challenge feature I
>> mentioned earlier? Here are pros and cons of the feature:
> Why on earth would we want to make it harder for people to read the
> website?
>
>> Pros:
>>
>>   • You can assure that (almost) all visitors are legitimate (human), since
>>     they must pass the challenge.
> Why do you think that's a feature we care about?
>
In fact, several websites (such as Capezio <capezio.com>, ProMods Map 
<promods.net>, and WHEELS.ca <wheels.ca>) have reCAPTCHA challenge 
enabled. Those sites just want to make sure that all visitors are 
humans. Feel free to visit those sites above for your consideration.

> Why on earth would we want to make it harder for people to read the
> website?

Because the website with reCAPTCHA challenge feature may violate "secure 
it without overdoing it" principle, that is, their webmasters tighten 
website security so much as to make their website harder to access.