Please. Captcha by default. Email domain filters. Auto-block federation from servers that don't respect. By default. Urgent.
And yes, to refute some comments, this publication is being upvoted by bots. A single computer was needed, not "thousands of dollars" spent.
BTW, it might be more inclusive language to use “allow list” and “block list”
I can't imagine being so obsessed with race politics as to think that purely technical terms like "white list" and "black list", which have never had any connection to race relations whatsoever, are somehow non-inclusive.
With all due respect, it’s from NIST’s guidance