Cloudflare

Cloudflare is free of CAPTCHAs; Turnstile is free for everyone

Sep 29, 2023Benedikt Wolters, Maxime Guerreiro, Adam Martinetti
Cloudflare is free of CAPTCHAs; Turnstile is free for everyone
SummaryAI, from the source post

This post announces the full integration of Turnstile, Cloudflare's CAPTCHA replacement, across all Cloudflare-issued challenges, effectively eliminating CAPTCHAs for all users. It also details the decoupling of Turnstile from the Cloudflare platform, making it available as a free, unlimited service for all website operators. The post elaborates on Turnstile's technical approach, emphasizing its privacy-preserving nature, WCAG 2.1 Level AA compliance, and bot detection mechanisms that rely on in-browser tests and analysis of browser characteristics rather than visual puzzles. It highlights successful deployments, including protecting Cloudflare's own signup flow and handling the Eurovision voting traffic. Lessons learned from the beta, such as improved error reporting for system time inaccuracies and privacy-related browser configurations, are also discussed, along with the introduction of a user feedback form.

More from the Website Security & Threat Management trail