The automatic fallback feature suffers at least two flaws:
- it is not configurable: Math is the hardcoded default
- it tries to establish a TCP connection on port 80 to the reCaptcha verify server, which is not that great in terms of performance, and is very unreliable.
At the very minimum, I suggest adding a configuration option that would allow disabling this feature and selecting the fallback captcha.
Comments
Comment #1
robloachDefinitely, I think we have two options here....
Pushing to critical so that it gets in the next release.
Comment #2
hass commentedI do not think this is a bug. Math captcha may have been chosen as we know this is always available.
Otherwise we need to write the configurable fallback logic + we need to have the fallback to Math captcha if the configured fallback is also not available. It may be useful to re-use the default captcha configured in captcha module setting...
The fallback is required if reCAPTCHA module has not yet configured (private/public keys are missing) and someone nevertheless assigns the recaptcha to a form, too.
Comment #3
liam morlandA configurable fallback mechanism sounds to me like something that should be in the CAPTCHA module, not reCAPTCHA.
Comment #4
hass commentedMoving for review.
Comment #5
couturier commentedComment #6
anybodyCorrect!
Right!
But well, we have the "Default CAPTCHA" already, so I don't think another fallback will be more understandable for users, nor be more robust... in the end of the chain we'll once again end up with Math captcha or NO captcha at all.
So I'm closing this won't fix. Feel free to reopen if it's worth it.