PoW doesn't stop bots.. It's an annoyance at most. A rate limiter and nothing more
PoW difficulty can be scaled, eg: all cookies must work 1s, but 2nd cookie from the same ip, might have to do 2s of work
ideally one would pick something a bit more forgiving than a linear function, to avoid penalizing too much users connecting from CGNAT
PoW difficulty can be scaled, eg: all cookies must work 1s, but 2nd cookie from the same ip, might have to do 2s of work
ideally one would pick something a bit more forgiving than a linear function, to avoid penalizing too much users connecting from CGNAT