[Bug 29053] Stay on the secure server even if switching to another wiki via automatically generated link in a MediaWiki: message
https://bugzilla.wikimedia.org/show_bug.cgi?id=29053 Bug 29053 depends on bug 20643, which changed state. Bug 20643 Summary: Serve SSL/HTTPS sites out of same domain names as HTTP access: https://en.wikipedia.org/ https://bugzilla.wikimedia.org/show_bug.cgi?id=20643 What|Removed |Added Status|NEW |RESOLVED Resolution|--- |FIXED -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 29053] Stay on the secure server even if switching to another wiki via automatically generated link in a MediaWiki: message
https://bugzilla.wikimedia.org/show_bug.cgi?id=29053 Robin Pepermans (SPQRobin) changed: What|Removed |Added Status|NEW |RESOLVED CC||robinp.1...@gmail.com Resolution||FIXED --- Comment #6 from Robin Pepermans (SPQRobin) 2011-11-28 18:51:26 UTC --- Marking as fixed, because most (if not all) links to other WMF sites in MediaWiki messages are now changed to protocol-relative links (although bug 20643 is not yet marked as fixed). -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 29053] Stay on the secure server even if switching to another wiki via automatically generated link in a MediaWiki: message
https://bugzilla.wikimedia.org/show_bug.cgi?id=29053 Matt McCutchen changed: What|Removed |Added CC||m...@mattmccutchen.net Blocks|20643 | Depends on||20643 --- Comment #5 from Matt McCutchen 2011-05-27 00:32:36 UTC --- The dependency should be the other way around: bug 20643 must be done first to make a protocol-relative link work. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 29053] Stay on the secure server even if switching to another wiki via automatically generated link in a MediaWiki: message
https://bugzilla.wikimedia.org/show_bug.cgi?id=29053
Brion Vibber changed:
What|Removed |Added
Blocks||20643
--- Comment #4 from Brion Vibber 2011-05-26 23:41:32 UTC
---
Generated links in messages should be either generated externally to the
message using current settings, or generated within the message using
{{localurl:}} and such which will generate data with current settings.
(A few places that try to cache have historically had problems with this like
the site notice, which is why we have to jump through some hoops to have
separate ssl/non-ssl caches or whatnot.)
However...
The link above is about a Wikimedia-specific message which includes a fully
qualified link to a particular Wikimedia web site, not a general MediaWiki
message that points to another part of the same site.
That particular message ([[MediaWiki:Wikimedia-copyright]]) is also a raw-HTML
message that's included on every page's footer, so I think there are
performance issues with dropping a {{#switch}} into it.
The correct fix for this in the long term is to switch it to use
protocol-relative links:
Text is available under the Creative Commons Attribution/Share-Alike License; additional terms
may apply. See Terms of
Use for details.
However, the second one (to wikimediafoundation.org) will not work until new
SSL system has been deployed (bug 20643), at least for that site.
A possible workaround is to swap the link to secure in JS, but that's nasty. :)
Since it's also a read-only page for all but a handful of people, it's not as
super important that it be HTTPS; in its current incarnation most folks will
not be able to edit on wikimediafoundation.org and won't need to be logged in
when they get there -- an HTTPS-only session won't get transferred and won't
leak any actual session data to observers. If they're already logged in on
non-HTTPS then they'll remain logged in on it, but that doesn't leak anything
that wasn't already being leaked if you happened to hit someone else's
hardcoded external link during the same browser session.
--
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 29053] Stay on the secure server even if switching to another wiki via automatically generated link in a MediaWiki: message
https://bugzilla.wikimedia.org/show_bug.cgi?id=29053 Mark A. Hershberger changed: What|Removed |Added Priority|Unprioritized |Low CC||m...@everybody.org -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 29053] Stay on the secure server even if switching to another wiki via automatically generated link in a MediaWiki: message
https://bugzilla.wikimedia.org/show_bug.cgi?id=29053 --- Comment #3 from Bawolff 2011-05-20 19:48:29 UTC --- (In reply to comment #2) > It requests that the secure server links to the secure server under all > circumstances. Thats a nice goal and all, but I'm not sure what specific actionable things are in this bug. A direct link to the non-secure server should always go to the unsecure server (imho), so perhaps making interwikis keep on secure server would be good, and using the foundation: interwiki. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 29053] Stay on the secure server even if switching to another wiki via automatically generated link in a MediaWiki: message
https://bugzilla.wikimedia.org/show_bug.cgi?id=29053 --- Comment #2 from Purodha Blissenbach 2011-05-20 19:37:39 UTC --- It requests that the secure server links to the secure server under all circumstances. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 29053] Stay on the secure server even if switching to another wiki via automatically generated link in a MediaWiki: message
https://bugzilla.wikimedia.org/show_bug.cgi?id=29053 Bawolff changed: What|Removed |Added CC||bawolff...@gmail.com --- Comment #1 from Bawolff 2011-05-19 23:16:00 UTC --- I'm not sure what exactly this bug is requesting be done (Change the english translation of the message, or make the secure set up not suck to say use different secure/non-secure interwikis, or something else...?) -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 29053] Stay on the secure server even if switching to another wiki via automatically generated link in a MediaWiki: message
https://bugzilla.wikimedia.org/show_bug.cgi?id=29053 Purodha Blissenbach changed: What|Removed |Added CC||bugzilla.wikime...@publi.pu ||rodha.net Severity|normal |critical -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
