Turns out the problems with comments were entirely my fault. While I was installing the new anti-spam plugin, I discovered what I had done wrong with MT-Keystrokes. Whoops.
So I guess I have to take back my complaints about MT-Keystrokes, which worked great where I had intalled it correctly, and my cranky comments about MT's failure to deal with comment spam. I should replace them with cranky comments about how MT isn't idiot proof.
By the time I saw my mistake, I was already halfway through installing the new plugin, so it seemed like less work to keep going rather than go back to MT-Keystrokes. It's called CCode and it seems to be working. It works by adding a hidden field to the comment form, and then using Javascript to obfuscate it so that comment spammers' cgi can't read it. As Georg pointed out, it's like a Javascript version of captcha.
Leave a comment