https://bugzilla.wikimedia.org/show_bug.cgi?id=67303
Jan Zerebecki <jan.wikime...@zerebecki.de> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|RESOLVED |REOPENED
CC| |jan.wikime...@zerebecki.de
Resolution|DUPLICATE |---
Ever confirmed|0 |1
--- Comment #2 from Jan Zerebecki <jan.wikime...@zerebecki.de> ---
Wikitech can use a different, easier implementation compared to bug 38516
(wikipedia, etc.). As HTTPS can not be disabled in the preferences and as there
is no geoip based blacklist for avoiding HTTPS, HSTS can be enabled by always
sending the header like the reporter suggested, e.g. via the webserver
configuration. (Although we might be able to use the same implementation it
still needs to be enabled as wikitech is completely separated.)
The apache configuration for wikitech is at:
operations/puppet.git/templates/apache/sites/wikitech.wikimedia.org.erb
--
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
