Highway of Life wrote:
I believe as much of a system can be put into defeating challenge and response as CAPTCHA.
Keep in mind that as soon as something is put in as "default", every spambot programmer in the world will set about programming methods to break that method of spam prevention.
So what might be a good idea now, won’t be if it becomes the default method for phpBB3, and becomes used on thousands of boards across the world.
Neotharmic is right... they will thank you later.
For a default system, I still believe the best system IS the CAPTCHA.
If Admins want something more, they should install additional modules/MODs to protect their board.
Many small boards may not need anything extra.
I wasn't being clear enough, I suppose. I meant that the challenge/response text method (or other similar admin-configurable method) should be included in the capability of phpBB, not that it should be default. CAPTCHA is better as a default. But if CAPTCHA ends up getting broken, I can't rewrite CAPTCHA. But I *can* define a new question, or change question methodology.
There are plenty of features available to admins that only a few will take advantage of -- yet they are included in baseline and not as mods.
Ultimately, if I have to mod the forum to get this, I can install a mod, or hack it into the forum myself. I don't think this is particularly critical...just that it would be nice.