Felix Palmen :freebsd: :c64:<p>There's a lot that could still be improved in <a href="https://mastodon.bsd.cafe/tags/swad" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>swad</span></a>, but I don't get that "proof of work" idea out of my mind, so I started a branch to work on it:</p><p><a href="https://github.com/Zirias/swad/pull/1" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="">github.com/Zirias/swad/pull/1</span><span class="invisible"></span></a></p><p>I really think it makes sense when you want some publicly known "guest login" which is still protected against <a href="https://mastodon.bsd.cafe/tags/bots" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>bots</span></a>. Not sure yet whether this will succeed, we will see!</p><p>It certainly won't be as "fancy" as <a href="https://mastodon.bsd.cafe/tags/anubis" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>anubis</span></a>, but do the same thing functionally: Require the client to find a <a href="https://mastodon.bsd.cafe/tags/nonce" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>nonce</span></a> that, combined with a server-provided <a href="https://mastodon.bsd.cafe/tags/challenge" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>challenge</span></a>, hashes to something with 'n' leading zeros using <a href="https://mastodon.bsd.cafe/tags/sha256" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>sha256</span></a>. In contrast to anubis, swad won't have to proxy everything (but rely on nginx' auth_request), and no challenge will be issued when the user logs in with credentials some *other* credentials checker accepts.</p>