https://bugzilla.wikimedia.org/show_bug.cgi?id=40968

Krinkle <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Priority|Unprioritized               |Normal
             Status|NEW                         |UNCONFIRMED
     Ever Confirmed|1                           |0

--- Comment #1 from Krinkle <[email protected]> 2012-10-11 23:06:14 UTC ---
Why?

It uses whatever the server configuration tells it to use. If the wiki is not
configured to indicate HTTPS support, it will not force an HTTPS request.

There should be no reason to make an exception for mw.Api, there are 100s of
other usages of server configuration.

e.g.

 $wgServer = ' //example.org';

Then article links, load.php, api.php etc. etc. will all use HTTP on HTTP and
HTTPS when the visitor is from HTTPS.

If $wgServer = 'http://example.org';

Then everything will be http. If your server also supports HTTPS, and you want
mw.Api to also use HTTPS, then please fix the server configuration as mw.Api is
not the only thing going insecure, there are at least 99 other things going
over http that shouldn't.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to