Add Email Verification

[evgip]

Add the ability for the administration of individual instances to enable e-mail verification at its discretion.

The amount of spam on popular resources is often disastrous. Captcha and email verification can make targeted spam attacks much more difficult.

[TheCreeper]

Regarding Captcha, would a "proof of work" be a viable alternative instead of asking the user to complete a puzzle?

https://scottpeterjohnson.github.io/hashwall/dist/

[evgip]

I agree about the captcha. There are many doubts and questions about its use.

#638

[ptman]

hcaptcha? (instead of recaptcha)

[Nutomic]

@ptman I dont like to use something that depends on an external server.

[ptman]

It must be optional. But in order to fight spam, which has great volume, and sometimes profit motive, a single instance admin or open source project developer doesn't necessarily have enough capacity to deal with it well. I believe cloudflare moved from recaptcha to hcaptcha after having evaluated several options.

Ideally, there would be a federated open source captcha usable for any and all services, but until then something else will have to be used.

[dessalines]

I'd want it to be something self-hostable, ideally a dockerized thing.

[ptman]

Some ideas: https://gitlab.com/gitlab-org/gitlab-foss/-/issues/46548 and element-hq/element-web#3606

[dessalines]

We've added captcha instead.