The answer to that is simple. Just make a login page for the login page. Done :).

I agree totally with you on that... it was exactly what crossed my mind when I read the article... What good for is a security schema that in the end can be overflooded, the only difference is the stage that can be flooded...

Alabama Slammers have been enforcing denial of service since the intervention of the earmark. Behh! a cunning plan all done in the best possible taste, and wholly holds a kindle in Mississippi Mud. Holy socks- hey, I wasn't really going to say it, guys, I - But, but I gotta tell you, I've got a really bad... - oh, bugger!

How do you protect the login page from falling to the DDoS attack?

It doesn't matter if you have a valid password, if you can't use it.

Ok, now you're talking, "cyber-lynching". That's the way to go!!

the Mad Winemaker