https://bugzilla.wikimedia.org/show_bug.cgi?id=38516

--- Comment #3 from Ryan Lane <[email protected]> 2012-07-20 21:58:15 UTC ---
We can turn it on by default for logged-in users right now. We can easily
handle that load.

To enable it for all users we'd need to expand the cluster so that every
squid/varnish node is also an HTTPS node. That would be a requirement for HSTS.
Indeed HSTS is the last in the chain for this.

Also, it isn't necessary for squid/varnish to send these headers. It would
actually be nice if MediaWiki handled this, since then anyone could enable it.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to