diff --git a/PRODUCT.md b/PRODUCT.md index 53eb090..adc5eee 100644 --- a/PRODUCT.md +++ b/PRODUCT.md @@ -12,8 +12,9 @@ web ## Users - **Primary: self-hosters.** Developers and sysadmins who run their own - infrastructure and want a CAPTCHA they control instead of a SaaS (ALTCHA - Sentinel, reCAPTCHA, hCaptcha). They deploy the server with Docker or a + infrastructure and want a CAPTCHA they control instead of a third-party + service (reCAPTCHA, hCaptcha, Turnstile) or a commercial licence (ALTCHA + Sentinel). They deploy the server with Docker or a binary, create one API key per site, wire the widget into their forms and call `/api/v1/verify` from their backend. Comfortable with a terminal, environment variables and a reverse proxy. @@ -36,8 +37,9 @@ running. ## Positioning -Same open ALTCHA protocol and official widget as ALTCHA Sentinel, but free, -self-hosted and fully owned: no cloud, no tracking, no external dependencies +Same open ALTCHA protocol and official widget as ALTCHA Sentinel. Sentinel is +self-hosted too: the difference is the licence and the scope. GateCHA is free, +MIT-licensed, never calls home and covers the essentials: no cloud, no tracking, no external dependencies in SQLite mode. GateCHA is not affiliated with ALTCHA, and every surface that compares them says so. @@ -96,6 +98,9 @@ Three repositories, one product: copy, privacy claims stated precisely (what does and does not leave the browser). - Always state non-affiliation with ALTCHA when comparing to Sentinel. +- Sentinel is self-hosted commercial software; ALTCHA's SaaS is ALTCHA Cloud. + Never describe Sentinel as a cloud service, and only state Sentinel features + checked on altcha.org. ## Evidence on Hand diff --git a/README.md b/README.md index 41e20ee..d0b562e 100644 --- a/README.md +++ b/README.md @@ -9,7 +9,7 @@ ๐ŸŒ **[Website](https://gatecha.org)** ยท ๐Ÿ“– **[Documentation](https://gatecha.org/docs)** ยท ๐Ÿงฉ **[WordPress plugin](https://github.com/Upellift99/GateCHA-WordPress)** -GateCHA is an open-source alternative to [ALTCHA Sentinel](https://altcha.org/docs/v2/sentinel/). It wraps the [ALTCHA](https://altcha.org/) proof-of-work CAPTCHA protocol with a management layer: API key management, per-site configuration, replay protection, and a dashboard with statistics. +GateCHA is a free, open-source alternative to [ALTCHA Sentinel](https://altcha.org/docs/sentinel/), ALTCHA's commercial self-hosted server. It wraps the [ALTCHA](https://altcha.org/) proof-of-work CAPTCHA protocol with a management layer: API key management, per-site configuration, replay protection, and a dashboard with statistics. GateCHA is not affiliated with ALTCHA. ## Features diff --git a/internal/his/his.go b/internal/his/his.go index 9c7e061..b0f2858 100644 --- a/internal/his/his.go +++ b/internal/his/his.go @@ -2,8 +2,8 @@ // Signature": it scores aggregate client interaction signals to estimate the // probability that a verification was automated. // -// This is GateCHA's open-source take on the concept behind ALTCHA Sentinel's -// proprietary HIS. It deliberately consumes only privacy-preserving aggregates +// This is GateCHA's open-source take on the Human Interaction Signature concept +// found in ALTCHA Sentinel. It deliberately consumes only privacy-preserving aggregates // (counts, distances, durations, timing variance) โ€” never raw coordinates, // timestamps, or key contents โ€” so it leaks nothing about what the user typed // or where they pointed.