Page MenuHomePhabricator
Create Task
Maniphest T132465

HTTPS redirects for stats.wikimedia.org
Closed, ResolvedPublic
Actions

Description

Enabling this is trivial, the question is: is there any reason we *can't* enable this? Who's responsible for this service and might know of exceptions like mixed-content, or HTTPS-incapable tools which rely on it, etc? [note this a generic message being tacked into the description of several similar tickets]

Related Objects
Search...

StatusAssignedTask
 ResolvedemaT108827 Investigate TCP Fast Open for tlsproxy
 OpenBBlackT107236 Switch port 80 to nginx on primary clusters
 OpenBBlackT104681 HTTPS Plans (tracking / high-level info)
 ResolvedBBlackT102824 Clean up DNS/redirects for TLS
 ResolvedArielGlennT107575 download.wiki[mp]edia.org are using an invalid certificate
 ResolvedChmarkineT110511 sitemap.wikimedia.org uses invalid SSL certificate
 ResolvedBBlackT104244 Preload HSTS
 ResolvedBBlackT102814 Decom old multiple-subdomain wikis in wikipedia.org
 ResolvedBBlackT104942 TLS and *.wap/*.mobile multi-level subdomains of wikipedia.org
 ResolvedBBlackT102815 Decom www.$lang hostnames/redirects
 ResolvedBBlackT102826 Fix/decom multiple-subdomain wikis in wikimedia.org
 ResolvedBBlackT102827 Decide what to do with *.donate.wikimedia.org subdomain + TLS
 ResolvedCCogdill_WMFT130414 delete links.email.donate.wikimedia.org (and all other email.donate.*?) from DNS
 DeclinedBBlackT111967 Preload HSTS for select hostnames within wikimedia.org
 DuplicateBBlackT111998 investigate/remove hostname login.m.wikimedia.org
 ResolvedBBlackT40516 Enable HSTS on Wikimedia sites
 ResolvedBBlackT103919 let all services on misc-web enforce http->https redirects
 ResolvedBBlackT132465 HTTPS redirects for stats.wikimedia.org
 ResolvedBBlackT132452 HSTS preload for wmfusercontent.org
 ResolvedBBlackT132685 Preload STS for wikimedia.org
 ResolvedBBlackT34796 status.wikimedia.org has no (valid) HTTPS
 ResolvedBBlackT132450 enable https for (ubuntu|apt|mirrors).wikimedia.org
 ResolvedBBlackT132812 Sort out letsencrypt puppetization for simple public hosts

Event Timeline

BBlack created this task.Apr 12 2016, 3:44 PM
BBlack added a comment.Apr 13 2016, 2:48 PM

I don't see any mixed content in simple checks (and we checked/fixed that in a much earlier ticket: (T93702). Since this site is clearly for human consumption, I'll probably enable the HTTPS redirect shortly if no objections come up.

Ottomata added a comment.Apr 13 2016, 3:11 PM

+1 should be fine to do.

gerritbot added a subscriber: gerritbot.Apr 13 2016, 3:34 PM

Change 283204 had a related patch set uploaded (by BBlack):
stats.wm.o HTTPS redirect T132465

https://gerrit.wikimedia.org/r/283204

gerritbot added a project: Patch-For-Review.Apr 13 2016, 3:34 PM

Change 283204 merged by BBlack:
stats.wm.o HTTPS redirect T132465

https://gerrit.wikimedia.org/r/283204

BBlack closed this task as Resolved.Apr 13 2016, 3:35 PM
BBlack claimed this task.
Content licensed under Creative Commons Attribution-ShareAlike 3.0 (CC-BY-SA) unless otherwise noted; code licensed under GNU General Public License (GPL) or other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL