Site key for wild card domain

[Boris Partensky]

Hi, we are a large website with tens of POS's being served, and new ones are rolled out every few weeks. Currently Recaptcha requires every domain to be listed separately which is a little painful for us for the reasons above. Is it possible to associate a site key with wild card TLD? mysite.*?

[James Turner]

If you add the domain "yourdomain.com" it will work for any subdomain thereof, i.e. mysite.yourdomain.com can use the same key.

This is my understanding, I could be wrong, and have not verified this.

[Boris Partensky]

My case would be mydomain.com vs mydomain.fr etc

--
You received this message because you are subscribed to a topic in the Google Groups "reCAPTCHA" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/recaptcha/hmld0_r6lQs/unsubscribe.
To unsubscribe from this group and all its topics, send an email to recaptcha+...@googlegroups.com.
To post to this group, send email to reca...@googlegroups.com.
Visit this group at http://groups.google.com/group/recaptcha.
For more options, visit https://groups.google.com/d/optout.

[Sean Grant]

I see your point for efficiency, but if you did something like yourdomain.* and you don't own every extension (ie. .fr .it .nu, etc.) then when someone else buys yourdomain.cr that you don't own yet, they want to register their single domain with CAPCTHA, what would happen? Does Google issues 2 separate API keys for you and them? Should both keys would work for yourdomain.cr?

It kinda doesn't seem fair that someone could register something like news.* (wildcard) because they own news.com and news.net, and news.us, but not news.fr. What does news.fr do?

I think if you can take the time to purchase another domain, you have the time to add it to the list of CAPTCHA API domains you have registered on your account.

I could be wrong though. Maybe Google has a way around this?

[Boris Partensky]

I see your point Sean, but I think google in fact does not prevent multiple accounts from referencing same domains. I just verified it by adding my domain to a different profile key. What really matters is the site key and what domain java script is executed on.

Boris

[Sean Grant]

Good testing Boris. Yeah, that makes sense. So I guess we can all register the same domain, but wouldn't have each other's secretkey, so Google still knows who is requesting what.

Good find.