title: How to delay / throttle login attempts in ASP.NET?
body: <p>I'm trying to do some very simple request throttling on my ASP.NET web project. Currently I'm not interested in globally throttling requests against DOS attacks, but would like to artificially delay the reponse to all login attempts, just to make dictionary attacks a bit harder to do (more or less like Jeff Atwood outlined <a href="http://www.codinghorror.com/blog/archives/001206.html" rel="nofollow noreferrer">here</a>).</p>
  
  <p>How would you implement it? The näive way of doing it would be - I suppose - to simply call</p>
  
  <pre><code>Thread.Sleep();
  </code></pre>
  
  <p>somewhere during the request. Suggestions? :)</p>