[Bug 69319] Allow option to uncheck Always use a secure connection when logged in at login.wikimedia.org/wiki/Special:Preferences

2014-09-16 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=69319

--- Comment #6 from Cometstyles cometsty...@yahoo.com ---
Its less about it being slow and more about it being irritating..why should you
enforcehttps on me (via cookies) even though i have disabled that option in
that wiki's preference? ..you people are refusing to see this as a bug/a
problem..but its a major pain in the ass for me so please, allow users to
globally TURN OFF this pathetic option, no one cares about security on the
wiki...

You are sacrificing speed for security (which is unnecessary).. I edit 40+
wikis a day from all domains and this is seriously becoming quite
irritating..even deleting the forcehttps cookies logs me out of everything
and prevent me from login back in unless i delete all centralauth related
cookies..if you refuse to fix this, atleast come up with a global script to
allow users to bypass this idiotic option.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 69319] Allow option to uncheck Always use a secure connection when logged in at login.wikimedia.org/wiki/Special:Preferences

2014-09-15 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=69319

--- Comment #4 from Cometstyles cometsty...@yahoo.com ---
And trying to remove the forcedHTTPS cookies kills all my logins and i can no
longer log in and then i'm forced to delete all my cookies related to
centralauth and then i have toi manually log oint oall wikis one by one by
visiting them...I sometimes edit over 40 different wikis a day, this is very
very very irritating..please find a fix fast, Allow users the option to OPT-OUT
of https..FGS!!...

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 69319] Allow option to uncheck Always use a secure connection when logged in at login.wikimedia.org/wiki/Special:Preferences

2014-09-15 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=69319

--- Comment #5 from Andre Klapper aklap...@wikimedia.org ---
(In reply to Cometstyles from comment #0)
 Https is slow

It's been explained on IRC already that this is not correct, and that the
reason for the slowness when using HTTPS is likely not HTTPS itself but
something outside (provider? routing?); and comment 2 has explained that the
specific HTTPS preference that you refer to is only applied for the *handshake*
anyway.

Summarizing how I understand things: 
The problem that you experience is very likely triggered by something else and
changing that preference would not solve your problem.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 69319] Allow option to uncheck Always use a secure connection when logged in at login.wikimedia.org/wiki/Special:Preferences

2014-09-15 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=69319

Andre Klapper aklap...@wikimedia.org changed:

   What|Removed |Added

   Priority|Low |Lowest

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 69319] Allow option to uncheck Always use a secure connection when logged in at login.wikimedia.org/wiki/Special:Preferences

2014-08-18 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=69319

Derk-Jan Hartman hartman.w...@gmail.com changed:

   What|Removed |Added

 CC||hartman.w...@gmail.com
 Depends on||14950

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 69319] Allow option to uncheck Always use a secure connection when logged in at login.wikimedia.org/wiki/Special:Preferences

2014-08-14 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=69319

--- Comment #3 from Cometstyles cometsty...@yahoo.com ---
I figured login.wikimedia.org was the global special:preference and changing
it there would affect all wikis..it could be a good idea to make it the Global
Preference panel for wikimedians..Wikia has a global option on their wikis, I
wonder why we are so behind...

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 69319] Allow option to uncheck Always use a secure connection when logged in at login.wikimedia.org/wiki/Special:Preferences

2014-08-11 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=69319

--- Comment #2 from Chris Steipp cste...@wikimedia.org ---
login.wikimedia.org really should never be visited by end users, and users
don't have edit rights there. That is why they can't edit any preferences.

The preference on loginwiki has almost no impact on your use of https on other
wikis (unless you're actually putting in your username and password there). It
will enforce that the actual login handshake (which is uncachable anyway, since
we're logging you in) goes over https if you're not from China/Iran.

I think the issue Cometstyles is hitting is that logging into a project that
didn't have the preference set (ie., zh.wikipedia.org), and we set the
forceHTTPS cookie at the top-level domain for the project (.wikipedia.org), so
other wikis in project would start redirecting to https, even though their
cookies are good for both http and https.

The fix for this is either a global preference, which unfortunately we don't
have yet. Or we set forceHTTPS per wiki, which was actually the original
design, but was changed a while back because it makes it really hard to
usefully examine your cookies.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 69319] Allow option to uncheck Always use a secure connection when logged in at login.wikimedia.org/wiki/Special:Preferences

2014-08-09 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=69319

Andre Klapper aklap...@wikimedia.org changed:

   What|Removed |Added

   Priority|Unprioritized   |Low
 CC||cste...@wikimedia.org
  Component|General/Unknown |SSL related
   Severity|normal  |enhancement

--- Comment #1 from Andre Klapper aklap...@wikimedia.org ---
So the request is that the by-default-enabled setting Always use a secure
connection when logged in on
https://login.wikimedia.org/wiki/Special:Preferences should not be greyed out?

Wondering why it's greyed out - Chris, do you know?

Also see https://meta.wikimedia.org/wiki/HTTPS#Disabling for general info.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 69319] Allow option to uncheck Always use a secure connection when logged in at login.wikimedia.org/wiki/Special:Preferences

2014-08-08 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=69319

Cometstyles cometsty...@yahoo.com changed:

   What|Removed |Added

 CC||cometsty...@yahoo.com
Version|wmf-deployment  |unspecified
Web browser|--- |Apple Safari

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 69319] Allow option to uncheck Always use a secure connection when logged in at login.wikimedia.org/wiki/Special:Preferences

2014-08-08 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=69319

Cometstyles cometsty...@yahoo.com changed:

   What|Removed |Added

Web browser|Apple Safari|Firefox

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l