Re: Alternative validation tool

> Could not this problem be dealt with by simply checking the referer page
> and if there referer field was not CAST (or, now WatchFire) either
> reject the request, or throttle back the service?

No.  Anyone scripting a service like this is quite capable of forging the
Referer.  They are probably already forging the User Agent.  It's unlikely
that they obey the robots protocol.

Rejecting on Referer may cause some accessibility problems, as some
proxies suppress it for privacy reasons.

Received on Saturday, 21 December 2002 06:04:32 UTC