Protecting public forms in ASP.NET Core without annoying real people
A layered defence against form spam: honeypot field, signed fill-time stamp, Cloudflare Turnstile and per-IP rate limiting - plus two rules that protect other people's inboxes.
ASP.NET Core Security