DEV Community

Discussion on: What Is My [Server] Throughput? (One-Click Audit)

Collapse
 
cubiclesocial profile image
cubiclesocial

You should consider adding a domain verification step to your software (either a DNS TXT record or a special meta tag on the target webpage). A CAPTCHA won't stop a determined user from using your service to initiate a DDoS attack. But requiring website/domain control would be a major deterrent from most abuse.

Collapse
 
mathewkurian profile image
Mathew Kurian

@cubiclesocial , I agree. For now, higher thresholds require approvals. As for captcha, do you mean from the tool’s side or that of the target endpoint?