Post

yeah this was caused by a few hundred fake accounts all signing up for mine and EZSuite's newsletter and then reporting the confirmation emails as spam. Sadly, when you follow @buttondown.com's setup instructions, you're vulnerable to those attacks because they don't have a Captcha in their form.

I'm now considering whether I should rebuild my blog with Elixir just so that I can add a Backend that can validate the captcha before signing them up to my Buttondown newsletter or whether there's a better option.