https://bugzilla.wikimedia.org/show_bug.cgi?id=54195

--- Comment #17 from Brad Jorsch <[email protected]> ---
(In reply to comment #15)
> Faidon also mentioned on irc that he was seeing http->https redirects. We
> wouldn't want to cache those, since those are based on the user being logged
> in.

For Special:CentralAutoLogin, it redirects to https if $wgSecureLogin is set
and wfCanIPUseHTTPS() returns true for the IP, regardless of whether the user
is logged in or not. If the user has the forceHTTPS cookie or is logged in and
returns true for $user->requiresHTTPS(), then I believe MediaWiki will do the
same sort of redirect before getting to CentralAuth.

BTW, should that redirect be varying on X-Forwarded-Proto? Probably, so I
submitted Gerrit change 90543 to do that.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to