Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> dynamic "secret" key fetching from some backend via JS that gets injected into the form and works as a "password" to successfully trigger the email to get sent

Are you describing nonces? A nonce is basically a "secret" (due to SSL encryption) number inserted into the HTML and submitted via a form. You don't need JS, just SSL.



Yeah, but in simpler terms :)

Making it require JS is on purpose as a lot of spam robots only parse HTML and don't execute JS, so you get less spam that way.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: