[Tickets #14263] Optional CAPTCHA support for the compose window

[noreply at bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: https://bugs.horde.org/ticket/14263
------------------------------------------------------------------------------
  Ticket             | 14263
  Created By         | aaronp at critd.com
  Summary            | Optional CAPTCHA support for the compose window
  Queue              | IMP
  Version            | Git master
  Type               | Enhancement
  State              | New
  Priority           | 1. Low
  Milestone          |
  Patch              |
  Owners             |
------------------------------------------------------------------------------


aaronp at critd.com (2016-02-19 13:55) wrote:

There have been times where our webmail installation has been targeted  
by distant IPs trying to send spam email using compromised user  
accounts. Of course a big part of preventing this from happening is  
educating our users on password safety, expiring weak passwords in  
favor of newer, stronger passwords, etc. We're working hard on that,  
but until the time where our users passwords are 100% strong, safe,  
and secure (i.e. never), we'd appreciate additional tools to help  
prevent or at least mitigate these risks.

One of the options that came to mind was CAPTCHA support for the IMP  
compose window. We're not 100% sure these attacks have been bot-based,  
but if only for peace-of-mind we'd like to be able to enable CAPTCHAs  
(maybe through Administration > Configuration) during those times when  
we feel we're being targeted. My initial preference would be for  
Google ReCAPTCHA support, but other options might be just as good or  
better. My needs are only for the IMP compose window, but I suppose  
other apps could make use of similar functionality if this was  
provided by the Horde core.