For the time being, I'd settle for just converting newlines to br's. Adding hyperlinks before there's solid infrastructure for dealing with spam would be a mistake. I'll be surprised if more than few days go by before spam shows up, even without hyperlinks.