Is ASP.NET Session State required for BotDetect CAPTCHA?
Yes, ASP.NET Session State is a requirement for BotDetect. Please note that it doesn’t have to be the default InProc memory Session State – you can use any Microsoft’s or custom Session provider you like (database, state server, file system, etc.). BotDetect doesn’t require a specific mode of persistence (it will work as long as it can save the required data somewhere), but since ASP.NET provides a way to customize the exact mode of persistence and hook it up to the default Session object (as explained at http://msdn2.microsoft.com/en-us/library/aa479034.aspx), all persistence calls in the BotDetect code are made using the Session object.
