Limiting the number of registration failures
Hi,
I would like the clients to register using HTTP authentication but if there are 5 (for example) failed attempts, for wrong password, within a given period of time (e.g. 30 sec) all following registration attempts will be rejected for a predefined period of time (e,g, 15 min).
The goal is to prevent brute-force password guessing.
What would be the correct way to achieve the above ?
Tnx