releases.wikimedia.org should be https only and have hsts set
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	yuvipanda
	Nov 16 2015, 11:00 PM

Description

releases.wikimedia.org doesn't have a http to https redirect nor hsts

Subject	Repo	Branch	Lines +/-
releases: enable strict transport security	operations/puppet	production	+1 -0
releases: load mod_headers for proto redirect	operations/puppet	production	+1 -0
releases: enforce http->https redirect behind misc-web	operations/puppet	production	+7 -0

yuvipanda raised the priority of this task from to Needs Triage.

yuvipanda updated the task description. (Show Details)

yuvipanda added a project: SRE.

Dzahn triaged this task as Medium priority.Nov 17 2015, 9:35 PM

Change 253757 had a related patch set uploaded (by Dzahn):
releases: enforce http->https redirect behind misc-web

Change 253759 had a related patch set uploaded (by Dzahn):
releases: enable strict transport security

Chmarkine set Security to None.

Chmarkine subscribed.

Change 253757 merged by Dzahn:
releases: enforce http->https redirect behind misc-web

Change 253936 had a related patch set uploaded (by Dzahn):
releases: load mod_headers for proto redirect

Change 253936 merged by Dzahn:
releases: load mod_headers for proto redirect

Merged the protocol redirect. It now redirects http->https.

Waiting with the HSTS headers just a little bit just in case.. because that can't be reverted.

Change 253759 merged by Dzahn:
releases: enable strict transport security

Also merged that part and added the STS headers now that about a week went by without complaints.

Dzahn closed this task as Resolved.Nov 24 2015, 10:00 PM