make blog links from wmfwiki front page use HTTPS links
Closed, ResolvedPublic
Actions

Assigned To

None

Authored By

	jeremyb
	Jul 3 2015, 7:02 PM

Description

https://wikimediafoundation.org/wiki/Home#Recent_Wikimedia_blog_posts

make blog links from wmfwiki front page use HTTPS links.

should we also make the blog force HTTPS too now that the wikis are?

Related Objects
Search...

Status	Assigned	Task
Resolved	None	T104728 make blog links from wmfwiki front page use HTTPS links
Resolved	jeremyb	T104727 add HTTPS variants for wmfblog in <rss> feed whitelists
Declined	None	T104726 blog rss feed links to HTTP (cleartext) blog posts even when feed fetched over HTTPS
Resolved	BBlack	T105905 Switch blog to HTTPS-only
Invalid	None	T64488 Wikimedia blog has unsecured elements on https

Event Timeline

jeremyb created this task.Jul 3 2015, 7:02 PM

jeremyb raised the priority of this task from to Needs Triage.

jeremyb updated the task description. (Show Details)

jeremyb added a project: Diff-blog.

jeremyb added subtasks: T104727: add HTTPS variants for wmfblog in <rss> feed whitelists, T104726: blog rss feed links to HTTP (cleartext) blog posts even when feed fetched over HTTPS.

jeremyb added subscribers: jeremyb, Aklapper.

Krenair closed subtask T104727: add HTTPS variants for wmfblog in <rss> feed whitelists as Resolved.Jul 27 2015, 11:32 PM

jrbs subscribed.Sep 11 2015, 9:56 PM

It seems that first solving T105905 would be the ideal course of action here.

• asherman subscribed.Nov 23 2015, 2:17 PM

Restricted Application added a subscriber: StudiesWorld. · View Herald TranscriptNov 23 2015, 2:17 PM

Varnent added a subtask: T105905: Switch blog to HTTPS-only.Jan 28 2016, 8:20 PM

Chmarkine added a project: HTTPS.Jan 29 2016, 1:25 PM

Chmarkine set Security to None.

I did https://wikimediafoundation.org/w/index.php?title=Template:Blogbox&diff=prev&oldid=104829, so this should now work as soon as T104726: blog rss feed links to HTTP (cleartext) blog posts even when feed fetched over HTTPS is fixed. T105905: Switch blog to HTTPS-only is not really a blocker.

And also https://wikimediafoundation.org/w/index.php?title=Spotlight_on_Wikimedia_Commons/Updates&diff=104830&oldid=92778 - but interestingly, that appears to have made it generate HTTPS links?

Aklapper added a project: Traffic.Feb 23 2016, 6:12 PM

Restricted Application added a project: SRE. · View Herald TranscriptFeb 23 2016, 6:12 PM

Looks to me like this ticket is either about editing wiki pages or about fixing things on the Blog side. Both of these don't really need Operations and Traffic, right?

In T104728#2065282, @Dzahn wrote:

Looks to me like this ticket is either about editing wiki pages or about fixing things on the Blog side. Both of these don't really need Operations and Traffic, right?

It looks to me like @Krenair's change has fixed this issue as it is described.

In T104728#2065282, @Dzahn wrote:

Looks to me like this ticket is either about editing wiki pages or about fixing things on the Blog side. Both of these don't really need Operations and Traffic, right?

Traffic was added via bulk edit and that causes Herald to add Operations...

jrbs triaged this task as Low priority.Feb 26 2016, 12:06 AM

jrbs removed projects: SRE, Traffic.

Restricted Application added a project: Traffic. · View Herald TranscriptFeb 26 2016, 12:06 AM

In T104728#2065314, @jrbs wrote:

In T104728#2065282, @Dzahn wrote:

Looks to me like this ticket is either about editing wiki pages or about fixing things on the Blog side. Both of these don't really need Operations and Traffic, right?

It looks to me like @Krenair's change has fixed this issue as it is described.

Looking at the main page, the last two entries had HTTPS links, but not the previous ones? Did something change on the blog/Automattic's end?

Restricted Application added a project: SRE. · View Herald TranscriptFeb 26 2016, 12:15 AM

They all look like HTTPS links to me now. I think something must have changed on the blog side.

• mmodell mentioned this in T128143: Herald does not seem to act on its own changes.Feb 26 2016, 2:49 AM

They all show as HTTP links now.

In T104728#2065750, @Krenair wrote:

They all show as HTTP links now.

I have no idea what is going on. It seems to have been caused by the publication of a new blogpost?

In any case, I think this is caused by the feed itself (https://blog.wikimedia.org/feed/) outputting links in HTTP, not too sure what can be done about that.