CloudFlare email protection

[bkil]

Is it intentional that it obscures phrases that look like email addresses (visible when JavaScript is disabled)? Presumably also happening with Fediverse accounts, root prompts, etc.

• https://archive.matrix.org/r/securemessagingapps:matrix.org/date/2023/04/10T22:22?at=$R1-F8XOD4IWi3aiOQEKxyj-Jtn2k05WPjwCqfwzyQ7Q

.
💬 (k) Hello from xmpp:[email protected]

{
  "content": {
    "body": "💬 (k) Hello from xmpp:[email protected]",
    "format": "org.matrix.custom.html",
    "formatted_body": "💬 (<b>k</b>) Hello from xmpp:[email protected]",
    "msgtype": "m.text"
  },
  "origin_server_ts": 1681141556603,
  "room_id": "!sOLQNHloevPHIEWcYN:matrix.org",
  "sender": "@fikabot:matrix.org",
  "type": "m.room.message",
  "unsigned": {
    "age": 4338869075
  },
  "event_id": "$R1-F8XOD4IWi3aiOQEKxyj-Jtn2k05WPjwCqfwzyQ7Q",
  "user_id": "@fikabot:matrix.org",
  "age": 4338869075
}

[MadLittleMods]

This is unintended and I wasn't aware of this happening. It doesn't seem like a totally bad thing to have enabled though. I could really go either way on this one 🤔

This appears to be "Email Address Obfuscation" from Cloudflare as you surmised.

For reference, when JavaScript is disabled the [email protected] text is linked to https://archive.matrix.org/cdn-cgi/l/email-protection which is served from Cloudflare with the following content. With JavaScript enabled, the content appears like normal.

Email Protection

You are unable to access this email address matrix.org

The website from which you got to this page is protected by Cloudflare. Email addresses on that page have been hidden in order to keep them from being accessed by malicious bots. You must enable Javascript in your browser in order to decode the e-mail address.

If you have a website and are interested in protecting it in a similar way, you can sign up for Cloudflare.

• How does Cloudflare protect email addresses on website from spammers?
• Can I sign up for Cloudflare?