Let me ask you instead: "how you intend to prevent matrimonial fraud?"
…
You can not. Because that is not how world works - crime did happen, happens, and will happen. You can stop attempts or fight it by education or by arresting criminals but never eliminate or prevent it.
"You need signals of some kind to know whether a visitor is likely to be malicious or not."
Innkeeper in 13 century: "I need signals of some kind to know whether a visitor is likely to be malicious or not before he enters." - See how ridiculous it is?
You are being being wrong here - you don't have 'visitor' but 'client' and as far as I'm concerned you do not spy on every client to "know" if he "is likely to be malicious or not". You may be suspicious of client activities but that is what you can realistically do.
Also define "fraud and abuse" because this can mean many things which may have many solutions.
>Innkeeper in 13 century: "I need signals of some kind to know whether a visitor is likely to be malicious or not before he enters." - See how ridiculous it is?
That innkeeper would have used the signal of how the visitor looks. If a visitor was being malicious and got kicked out, that person could not just come right back in as the inkeeper would be able to tell that he was the same person as before.
Also your metaphor is not great because WEI can only happen after the first page load since it requires the site to use javascript to use the api.
>That innkeeper would have used the signal of how the visitor looks
Not like that ever backfired.
>inkeeper would be able to tell
assuming that he have photographic memory and visitor did not change his looks by any way (shaving, getting scar etc.).
if you have to refer to 'looks' you have IP - it has exactly same power as signal as looks.
>Also your metaphor is not great because WEI can only happen after the first page load since it requires the site to use javascript to use the api.
for user that is irrelevant point. As people do not care about how you run server - only if they can use the page.
To put simple - I run My browser of choice on my OS of choice with my stack as I wish (otherwise I wouldn't run Linux). The idea that server owner should get any say about this is simply intrusive.
…
You can not. Because that is not how world works - crime did happen, happens, and will happen. You can stop attempts or fight it by education or by arresting criminals but never eliminate or prevent it.
"You need signals of some kind to know whether a visitor is likely to be malicious or not."
Innkeeper in 13 century: "I need signals of some kind to know whether a visitor is likely to be malicious or not before he enters." - See how ridiculous it is?
You are being being wrong here - you don't have 'visitor' but 'client' and as far as I'm concerned you do not spy on every client to "know" if he "is likely to be malicious or not". You may be suspicious of client activities but that is what you can realistically do.
Also define "fraud and abuse" because this can mean many things which may have many solutions.