Should we change labs and tools proxies to https-only?
Closed, DuplicatePublic
Actions

Assigned To

None

Authored By

	Andrew
	Mar 17 2016, 6:31 PM

Description

I can't think of a reason not to

Event Timeline

Andrew created this task.Mar 17 2016, 6:31 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMar 17 2016, 6:31 PM

Yes, definitely.

Some of the tools don't support http, or don't need https, so the developers haven't added support for it in their tools. Other than that setback, I don't think there is anything to stop us from switching.

jeremyb-phone edited subscribers, added: jeremyb; removed: jeremyb-phone.Mar 18 2016, 7:21 PM

jeremyb-phone subscribed.

@tom29739 as far as I know, web access for all tools is managed through a proxy which supports https. As long as tools support normal http on a normal port, https works for free without any additional tool support.

I'm pretty sure the only exceptions would be cases where tools inspect the URL used to access them and freak out that there's an 's' in it.

Andrew added subscribers: bd808, • chasemp, yuvipanda.Mar 20 2016, 3:18 PM

@Andrew That's handy, I don't see any reason not to switch to https then. It would make tools more secure, so that's all good.

Andrew closed this task as a duplicate of T102367: Migrate tools.wmflabs.org to https only (and set HSTS).Mar 22 2016, 2:42 PM

yuvipanda closed this task as a duplicate of T102367: Migrate tools.wmflabs.org to https only (and set HSTS).Mar 22 2016, 2:42 PM

Ricordisamoa subscribed.Mar 22 2016, 6:37 PM

• Phabricator_maintenance removed a subscriber: yuvipanda.Jun 7 2017, 6:43 PM

Should we change labs and tools proxies to https-only?Closed, DuplicatePublicActions

Description

Event Timeline

Should we change labs and tools proxies to https-only?
Closed, DuplicatePublic
Actions