Make wp.zip redirect to https://wordpress.org

[chrisdavidmiles]

I bought the domain wp.zip shortly after the TLD went live to make sure it was not purchased by spammers. I'm working with @chanthaboune to get the domain into a registrar account owned by ​The WordPress Foundation.

This ticket is about how the url should behave (what should happen when someone visits ​https://wp.zip in a browser or does wget wp.zip from a terminal, etc).

I would recommend that the url just redirect all urls at wp.zip/* to wordpress.org as it's currently set to do. I don't want to encourage people to use any domain other than wordpress.org for things that are hosted at wordpress.org. So I don't think it would be a good idea to set up a wildcard redirect or redirect to ​https://wordpress.org/latest.zip .

In my mind, the importance of having this domain be owned and controlled by The WordPress Foundation is to make sure the domain is not used maliciously, not to find a clever use for it. And the url wordpress.org/latest.zip is already a short enough url to type lots of times.

That's my take, but I'm open to other opinions on how wp.zip should behave, or how the WordPress project can use it.

[sippis]

+1 for having wp.zip/* just redirect to wordpress.org and not to redirect with the path

Here's a great good explanation of why having .zip domain matters, the TLD can be (and some sources suggest that it is already) exploited quite easily. ​https://medium.com/@bobbyrsec/the-dangers-of-googles-zip-tld-5e1e675e59a5

[Otto42]

Agreed. While it is tempting to have it redirect to the latest zip file, for various coolness reasons, the link should remain on wordpress.org along with everything official.

[afragen]

Thank you Chris for thinking ahead and resolving this potential issue.

[dd32]

It doesn't seem like there's anything that needs handling here specifically.

All of our typo/non-primary domains automatically redirect to WordPress.org.

Since we're not going to add any specific handling towards ZIPs or anything for this domain based on the above discussion (and my personal opinion) I'm going to close this as being handled upstream (the domain transfer via the foundation, and the steps our systems team does for all domains).

If anyone feels strongly that this should redirect to the latest WP zip or something like that, feel free to add some discussion here, and re-open if there's an agreement.

For anyone else, if you have a domain which conflicts with the ​WordPress trademark usage guidelines, or you think should be owned by the Foundation, please ​Contact the WordPress Foundation directly.