[Bug 29898] User preference for HTTP vs HTTPS while logged in
https://bugzilla.wikimedia.org/show_bug.cgi?id=29898 Andre Klapper a9016...@gmx.de changed: What|Removed |Added CC||a9016...@gmx.de --- Comment #10 from Andre Klapper a9016...@gmx.de 2012-06-03 09:54:48 UTC --- Does this report depend on bug 36456? -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 29898] User preference for HTTP vs HTTPS while logged in
https://bugzilla.wikimedia.org/show_bug.cgi?id=29898 Krinkle krinklem...@gmail.com changed: What|Removed |Added Target Milestone|1.20wmf deployment |1.20.0 release -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 29898] User preference for HTTP vs HTTPS while logged in
https://bugzilla.wikimedia.org/show_bug.cgi?id=29898 Nemo_bis federicol...@tiscali.it changed: What|Removed |Added CC||wm-thunderh...@charter.net --- Comment #9 from Nemo_bis federicol...@tiscali.it 2012-03-15 09:14:16 UTC --- *** Bug 12807 has been marked as a duplicate of this bug. *** -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 29898] User preference for HTTP vs HTTPS while logged in
https://bugzilla.wikimedia.org/show_bug.cgi?id=29898 MZMcBride b...@mzmcbride.com changed: What|Removed |Added Target Milestone|--- |1.20wmf deployment -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 29898] User preference for HTTP vs HTTPS while logged in
https://bugzilla.wikimedia.org/show_bug.cgi?id=29898 John Mark Vandenberg jay...@gmail.com changed: What|Removed |Added CC||jay...@gmail.com --- Comment #8 from John Mark Vandenberg jay...@gmail.com 2012-03-10 22:30:27 UTC --- This can be done on the client side for Firefox and Chrome. https://www.eff.org/https-everywhere -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 29898] User preference for HTTP vs HTTPS while logged in
https://bugzilla.wikimedia.org/show_bug.cgi?id=29898 Roan Kattouw roan.katt...@gmail.com changed: What|Removed |Added CC||billinghu...@gmail.com --- Comment #7 from Roan Kattouw roan.katt...@gmail.com 2011-10-31 08:33:46 UTC --- *** Bug 32061 has been marked as a duplicate of this bug. *** -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 29898] User preference for HTTP vs HTTPS while logged in
https://bugzilla.wikimedia.org/show_bug.cgi?id=29898 --- Comment #5 from Roan Kattouw roan.katt...@gmail.com 2011-10-25 13:19:50 UTC --- *** Bug 31432 has been marked as a duplicate of this bug. *** -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 29898] User preference for HTTP vs HTTPS while logged in
https://bugzilla.wikimedia.org/show_bug.cgi?id=29898 Roan Kattouw roan.katt...@gmail.com changed: What|Removed |Added CC||roan.katt...@gmail.com --- Comment #6 from Roan Kattouw roan.katt...@gmail.com 2011-10-25 13:23:23 UTC --- (In reply to comment #0) Bonus points for being able to redirect from http to https links in order to bump over to a live SSL login session when following generic links found elsewhere. (may need another bug) This was filed as bug 31432 and then duped to this bug. To accomplish this securely, we would need to do the following: * When logging in over HTTPS and the pref is set, set the login cookies securely (as always) but set an insecure cookie that specifies that the user wants HTTPS * On every HTTP request, check for the presence of this cookie and redirect to HTTPS if so. This also requires that the name of this cookie be added to the XVO header. It appears that Liangent (in filing bug 31432) and Ryan (through an in-person conversation with me) both came up with the same plan separately. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 29898] User preference for HTTP vs HTTPS while logged in
https://bugzilla.wikimedia.org/show_bug.cgi?id=29898 Mark A. Hershberger m...@everybody.org changed: What|Removed |Added Priority|Unprioritized |Normal CC||m...@everybody.org -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 29898] User preference for HTTP vs HTTPS while logged in
https://bugzilla.wikimedia.org/show_bug.cgi?id=29898 --- Comment #2 from Brion Vibber br...@wikimedia.org 2011-07-15 19:06:37 UTC --- Running all login forms through HTTPS, then after that either keeping you in secure HTTPS-land or giving you an insecure cookie and shoving you back to HTTP, is common practice. Forcing all logged-in sessions EVER onto HTTPS is my real preference, but I don't know if we're ready for that yet. :) -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 29898] User preference for HTTP vs HTTPS while logged in
https://bugzilla.wikimedia.org/show_bug.cgi?id=29898 MZMcBride b...@mzmcbride.com changed: What|Removed |Added CC||b...@mzmcbride.com --- Comment #3 from MZMcBride b...@mzmcbride.com 2011-07-15 19:47:14 UTC --- (In reply to comment #2) Forcing all logged-in sessions EVER onto HTTPS is my real preference, but I don't know if we're ready for that yet. :) Yes, same. I'm a bit unsure why an (intermediate) user preference would be good here. User preferences are generally fairly evil; they're made worse by a lack of support for global (Wikimedia-wide) user preferences. It'd be simpler and saner to switch all e-mail links to be https when the time comes rather than going down the road of different messages based on user preferences. The only thing stopping people from using the secure server currently are the ugly URL scheme and the speed. I think waiting until both of these are resolved (hopefully in short order) and then forcing all users through https makes more sense than a user preference here. Admittedly other sites such as Facebook and Twitter have user preferences for https support. Some sites such as Gmail do not. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 29898] User preference for HTTP vs HTTPS while logged in
https://bugzilla.wikimedia.org/show_bug.cgi?id=29898 --- Comment #4 from MZMcBride b...@mzmcbride.com 2011-07-15 19:58:49 UTC --- (In reply to comment #3) Admittedly other sites such as Facebook and Twitter have user preferences for https support. Some sites such as Gmail do not. Casey tells me I'm wrong about this, and I am. http://mail.google.com/support/bin/answer.py?hl=enctx=mailanswer=74765 explains that there is a user preference in Gmail, but that the default is for https. I guess the common practice is to offer an option. I'm still unclear on the virtue of making this optional, though. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l