I have thought about. Rate-limiting is applied but a DDoS would penetrate anyway. reCaptcha is also applied but, well, Google went down these days and brought reCaptcha with it… which made me think about this.
In anycase, I wanted to know if there are other papers on the subject or strategies to consider.
