[Bug 29898] User preference for HTTP vs HTTPS while logged in

2012-06-03 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=29898

Andre Klapper a9016...@gmx.de changed:

   What|Removed |Added

 CC||a9016...@gmx.de

--- Comment #10 from Andre Klapper a9016...@gmx.de 2012-06-03 09:54:48 UTC ---
Does this report depend on bug 36456?

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 29898] User preference for HTTP vs HTTPS while logged in

2012-04-05 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=29898

Krinkle krinklem...@gmail.com changed:

   What|Removed |Added

   Target Milestone|1.20wmf deployment  |1.20.0 release

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 29898] User preference for HTTP vs HTTPS while logged in

2012-03-15 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=29898

Nemo_bis federicol...@tiscali.it changed:

   What|Removed |Added

 CC||wm-thunderh...@charter.net

--- Comment #9 from Nemo_bis federicol...@tiscali.it 2012-03-15 09:14:16 UTC 
---
*** Bug 12807 has been marked as a duplicate of this bug. ***

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 29898] User preference for HTTP vs HTTPS while logged in

2012-03-10 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=29898

MZMcBride b...@mzmcbride.com changed:

   What|Removed |Added

   Target Milestone|--- |1.20wmf deployment

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 29898] User preference for HTTP vs HTTPS while logged in

2012-03-10 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=29898

John Mark Vandenberg jay...@gmail.com changed:

   What|Removed |Added

 CC||jay...@gmail.com

--- Comment #8 from John Mark Vandenberg jay...@gmail.com 2012-03-10 22:30:27 
UTC ---
This can be done on the client side for Firefox and Chrome.
https://www.eff.org/https-everywhere

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 29898] User preference for HTTP vs HTTPS while logged in

2011-10-31 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=29898

Roan Kattouw roan.katt...@gmail.com changed:

   What|Removed |Added

 CC||billinghu...@gmail.com

--- Comment #7 from Roan Kattouw roan.katt...@gmail.com 2011-10-31 08:33:46 
UTC ---
*** Bug 32061 has been marked as a duplicate of this bug. ***

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 29898] User preference for HTTP vs HTTPS while logged in

2011-10-25 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=29898

--- Comment #5 from Roan Kattouw roan.katt...@gmail.com 2011-10-25 13:19:50 
UTC ---
*** Bug 31432 has been marked as a duplicate of this bug. ***

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 29898] User preference for HTTP vs HTTPS while logged in

2011-10-25 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=29898

Roan Kattouw roan.katt...@gmail.com changed:

   What|Removed |Added

 CC||roan.katt...@gmail.com

--- Comment #6 from Roan Kattouw roan.katt...@gmail.com 2011-10-25 13:23:23 
UTC ---
(In reply to comment #0)
 Bonus points for being able to redirect from http to https links in order to
 bump over to a live SSL login session when following generic links found
 elsewhere. (may need another bug)
This was filed as bug 31432 and then duped to this bug. To accomplish this
securely, we would need to do the following:
* When logging in over HTTPS and the pref is set, set the login cookies
securely (as always) but set an insecure cookie that specifies that the user
wants HTTPS
* On every HTTP request, check for the presence of this cookie and redirect to
HTTPS if so. This also requires that the name of this cookie be added to the
XVO header.

It appears that Liangent (in filing bug 31432) and Ryan (through an in-person
conversation with me) both came up with the same plan separately.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 29898] User preference for HTTP vs HTTPS while logged in

2011-07-18 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=29898

Mark A. Hershberger m...@everybody.org changed:

   What|Removed |Added

   Priority|Unprioritized   |Normal
 CC||m...@everybody.org

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 29898] User preference for HTTP vs HTTPS while logged in

2011-07-15 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=29898

--- Comment #2 from Brion Vibber br...@wikimedia.org 2011-07-15 19:06:37 UTC 
---
Running all login forms through HTTPS, then after that either keeping you in
secure HTTPS-land or giving you an insecure cookie and shoving you back to
HTTP, is common practice.

Forcing all logged-in sessions EVER onto HTTPS is my real preference, but I
don't know if we're ready for that yet. :)

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 29898] User preference for HTTP vs HTTPS while logged in

2011-07-15 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=29898

MZMcBride b...@mzmcbride.com changed:

   What|Removed |Added

 CC||b...@mzmcbride.com

--- Comment #3 from MZMcBride b...@mzmcbride.com 2011-07-15 19:47:14 UTC ---
(In reply to comment #2)
 Forcing all logged-in sessions EVER onto HTTPS is my real preference, but I
 don't know if we're ready for that yet. :)

Yes, same.

I'm a bit unsure why an (intermediate) user preference would be good here. User
preferences are generally fairly evil; they're made worse by a lack of support
for global (Wikimedia-wide) user preferences.

It'd be simpler and saner to switch all e-mail links to be https when the time
comes rather than going down the road of different messages based on user
preferences. The only thing stopping people from using the secure server
currently are the ugly URL scheme and the speed. I think waiting until both of
these are resolved (hopefully in short order) and then forcing all users
through https makes more sense than a user preference here. Admittedly other
sites such as Facebook and Twitter have user preferences for https support.
Some sites such as Gmail do not.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 29898] User preference for HTTP vs HTTPS while logged in

2011-07-15 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=29898

--- Comment #4 from MZMcBride b...@mzmcbride.com 2011-07-15 19:58:49 UTC ---
(In reply to comment #3)
 Admittedly other sites such as Facebook and Twitter have user 
 preferences for https support. Some sites such as Gmail do not.

Casey tells me I'm wrong about this, and I am.
http://mail.google.com/support/bin/answer.py?hl=enctx=mailanswer=74765
explains that there is a user preference in Gmail, but that the default is for
https.

I guess the common practice is to offer an option. I'm still unclear on the
virtue of making this optional, though.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l