Hi, I’m the author of the article and I’m horrified by how many spelling mistakes I made. I must have written this in a rage.
To answer your question, since we had control of the clients (since its a game) we used a proof of work challenge on TLS handshake which increased in complexity the more failed attempts you gave us.
Very cheap on the server, very expensive on the client, which effectively rate limited connection attempts.
To answer your question, since we had control of the clients (since its a game) we used a proof of work challenge on TLS handshake which increased in complexity the more failed attempts you gave us.
Very cheap on the server, very expensive on the client, which effectively rate limited connection attempts.