Before we can switch labs proxies to https-only we have to get everything under our one *.wmflabs.org cert.
Description
Description
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | • bd808 | T131288 Make Cloud Services shared HTTP proxies enforce TLS | |||
| Resolved | Andrew | T131290 Abolish use of labs proxies in domains other than .wmflabs.org |
Event Timeline
Comment Actions
I think we should go in the opposite direction - e.g. use LE to get certs for any domains outside of *.wmflabs.org necessary, and abolish the use of proxies directly under wmflabs.org.
Comment Actions
I don't necessarily disagree with Alex's suggestions but I'm nonetheless going to pursue the initial intent of this task for now... once we have things somewhat standardized we can talk about new proxy dns designs. Obviously killing off long-standing domains is hard in any case.
Comment Actions
Currently the only outliers are in the 'maps' project. I'm creating a subtask for this.