[wp-meta] [Making WordPress.org] #4753: Obfuscate profile links

[Making WordPress.org]

#4753: Obfuscate profile links
----------------------------+--------------------
 Reporter:  jonoaldersonwp  |      Owner:  (none)
     Type:  enhancement     |     Status:  new
 Priority:  high            |  Milestone:
Component:  Profiles        |   Keywords:  seo
----------------------------+--------------------
 Changing the way in which profile links output is part of broader approach
 to 'solving' spam profiles on wordpress.org. See
 https://www.jonoalderson.com/wordpress/wordpress-org-toxic-profile-spam/
 for long-form research and rationale.

 This part of the solution requires us to:
 - Alter the destination of the link URL, to obfuscate the destination and
 pass it through an internal redirection system. Specifically, an example
 profile link to https://www.example.com/example-spam-link/ should be
 transformed to https://profiles.wordpress.org/out/abc123, where `abc123`
 is a hashed (and salted with a secret) key representing the profile URL.
 Requests to that URL should execute a 301 redirect to the actual profile
 URL.
 - Add a `disallow` rule to the https://profiles.wordpress.com/robots.txt
 file, which blocks the `/out/` folder.

-- 
Ticket URL: <https://meta.trac.wordpress.org/ticket/4753>
Making WordPress.org <https://meta.trac.wordpress.org/>
Making WordPress.org