https://bugzilla.wikimedia.org/show_bug.cgi?id=67303
Jan Zerebecki <jan.wikime...@zerebecki.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED CC| |jan.wikime...@zerebecki.de Resolution|DUPLICATE |--- Ever confirmed|0 |1 --- Comment #2 from Jan Zerebecki <jan.wikime...@zerebecki.de> --- Wikitech can use a different, easier implementation compared to bug 38516 (wikipedia, etc.). As HTTPS can not be disabled in the preferences and as there is no geoip based blacklist for avoiding HTTPS, HSTS can be enabled by always sending the header like the reporter suggested, e.g. via the webserver configuration. (Although we might be able to use the same implementation it still needs to be enabled as wikitech is completely separated.) The apache configuration for wikitech is at: operations/puppet.git/templates/apache/sites/wikitech.wikimedia.org.erb -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug. _______________________________________________ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l