https://bugzilla.wikimedia.org/show_bug.cgi?id=53538

       Web browser: ---
            Bug ID: 53538
           Summary: Logged users redirected to HTTPS only on some wikis
           Product: Wikimedia
           Version: wmf-deployment
          Hardware: All
                OS: All
            Status: NEW
          Severity: normal
          Priority: Unprioritized
         Component: SSL related
          Assignee: [email protected]
          Reporter: [email protected]
    Classification: Unclassified
   Mobile Platform: ---

In the recent deployment of HTTPS the users who asked for being redirected to
HTTPS are given global forceHTTPS cookies to be redirected to HTTPS on
(theoretically) all wiki projects: Wikipedia, Wikisource, etc. In the current
setup these global forceHTTPS cookies are set on global domains
(.wikipedia.org, etc) but they are prefixed by the original wiki prefix (e.g.
frwikiforceHTTPS) or by English-language prefixes (e.g.
enwikisourceforceHTTPS), therefore the other language wikis are not redirected
to HTTPS.

I guess that this is a bug since some languages (English) are redirected to
HTTPS and the others are not, at least it is non-intuitive from a user point of
view.

This bug is related to bug 53536 about the absence of removing of the global
forceHTTPS cookies in the Wikimedia environment.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to