https://bugzilla.wikimedia.org/show_bug.cgi?id=29898

--- Comment #1 from Andrew Garrett <[email protected]> 2011-07-15 19:04:16 
UTC ---
(In reply to comment #0)
> With the early protocol-relative link HTTP+HTTPS parallel deployments starting
> (bug 20643), we notice there's not currently any way to specify that, as a
> particular user account, you want to make sure you log in on HTTPS only. This
> means it's easy to accidentally log in insecurely even though you wanted to 
> log
> in securely.

Remember that this requires our login form to first ask for the user's name,
and then their password on a different page. I think I'd rather we just ran all
logins through HTTPS to begin with.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to