reCAPTCHA and IPv6 remote_ip

[bstevant]

Hi all,

I have a problem related to reCAPTCHA and an IPv6-enable website.
In /verify request, reCAPTCHA send the remote_ip variable.
If the website is accessed by an IPv6 client, remote_ip is an IPv6
address.
The reCAPTCHA API then refused the /verify request.
If access is made from an IPv4 client (and then remote_ip is IPv4
address), everything works fine (so it is not a key problem as I
suspected).
Can the reCAPTCHA API accept IPv6 addresses in the remote_ip
variable ?

Please consider this issue as major, as the number of IPv6 enabled web
server is growing.

[reCAPTCHA Support]

Hi,

Right now, we don't handle IPv6 there. For now, you can replace IPv6 addresses with a junk address (please use something like 192.168.6.6 -- it's RFC1918 space, and the 6's are a nice hint).

--
reCAPTCHA: stop spam, read books
http://recaptcha.net

[Adrian Godong]

I think it's a lot more complex than that (enabling remote_ip to receive
IPv6 addresses).

Since I don't know what happens on reCAPTCHA servers, I can only assume that
reCAPTCHA servers need to live on IPv6 address too. And since (from what I
know) it's on US soil, that means IPv6 support is not yet available.

I do hope this issue is escalated into a major one.

[reCAPTCHA Support]

Most IPv6 deployments work together with IPv4 -- that is you can access IPv4 via a tunnel. The majority of the internet is NOT on IPv6. For example google.com does not have an IPv6 DNS record, nor does microsoft.com.

[bstevant]

Hi,

I don't think this is a network issue (i.e. reCAPTCHA need an IPv6
connectivity), but rather an application issue.
The sever which host pages using reCAPTCHA is dual-stack, meaning it
can handle requests from client in IPv6 and IPv4.
When a dual-stack client (which I have at work, at home or anywhere
else in the world with a tunnel) contact the server, it uses IPv6
first.
So when the client tried to use reCAPTCHA on a page, the "applet" send
IPv6 address of the client in remote_ip. And, for a reason I don't
know about, the reCAPTCHA server denies the request. Here lies the
application issue.

My point is not to push IPv6 deployment for the network of the
reCAPTCHA server, but rather to make the reCAPTCHA server application
to accept IPv6 addresses as valid in remote_ip variable. High-level
API for address validation exists for any programming language now.

The workaround proposed (192.168.6.6) is not usable since I don't have
any way to modify the remote_ip variable sent to the server from the
pages (or is there a way to change it ? even when using reCAPTCHA as a
wordpress plugins ?)

[reCAPTCHA Support]

Hi,

We'll look into making reCAPTCHA accept ipv6 addresses in the remote IP field on our next server push.

On 9/9/07, bstevant < bruno....@gmail.com> wrote:

Hi,

I don't think this is a network issue ( i.e. reCAPTCHA need an IPv6

[bstevant]

OK thanks a lot.
Could you please announce this support in this thread when it is
ready ?

On 9 sep, 22:23, "reCAPTCHA Support" <supp...@recaptcha.net> wrote:
> Hi,
>
> We'll look into making reCAPTCHA accept ipv6 addresses in the remote IP
> field on our next server push.
>

> On 9/9/07, bstevant <bruno.stev...@gmail.com> wrote:
>
>
>
>
>
> > Hi,
>

> > I don't think this is a network issue (i.e. reCAPTCHA need an IPv6