@stefanoStefano Marinelli
@hlliziDieu Not "just" Javascript, it also requires specific "modern" APIs, namely Worker[1] and SubtleCrypto[2]. Only full-blown graphical Browsers are likely to ever implement these.
But OTOH, I see few alternatives to keep the bots out without making the content fully private. I mean, you say "breaking basic web access", sure, but that's exactly what these bots use π€·.
I still have that crazy idea in mind that I could kind of "steal" this proof-of-work idea for my #swad tool, but there it would be combined with username/password login, so you could decide whether you just log in OR you hit a button to have your browser do some stupid hashing work ... π but really not sure whether I'll tackle that.
--
[1] https://developer.mozilla.org/en-US/docs/Web/API/Worker
[2] https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto