We are having the same issue as @wwi-jeffnishi and really need a resolution that does not involve every one of our customers whitelisting the resolution email domains. I thought perhaps I could make a custom field that would be visible to customers on the ticket that asks for the rating/comments but this is not possible that I can find and Atlassian has said it is not set up out of the box to do this. 

We would also like to see something along the lines of this implemented. What we have found is that certain email antimalware/antispam solutions that test URLs in sandbox are creating false satisfaction ratings. It's not reasonable to request all source domains of requesters to whitelist the resolution emails from any form of URL scanning.

This behaviour can be demonstrated by entering one of the satisfaction rating tokenized links into the virustotal URL scan engine.

edit to add: It should be noted that for this particular example a feature that expires the token on first use would effectively block the true reporter from being able to give a satisfaction rating as the scan that triggers the rating would occur before the mail is even delivered.

Customer had a request to change a rating of 1 was accidentally submitted into a rating of 5 for one of the JSD ticket and would like to understand how this managed/changed.

https://getsupport.atlassian.com/browse/PS-48581