Page MenuHomePhabricator

stream.wikimedia.org doesn't redirect to HTTPS
Closed, DuplicatePublic

Description

http://stream.wikimedia.org doesn't redirect to HTTPS. T134871 is about moving it behind cache_misc to standardize termination and not need a separate certificate, but VCL has also been updated there to do the same as the current direct service (not redirect HTTPS). Whichever path we go down, we need to eventually close off the insecure access here.

Related Objects

StatusAssignedTask
OpenBBlack
ResolvedBBlack
ResolvedArielGlenn
ResolvedChmarkine
ResolvedBBlack
ResolvedBBlack
ResolvedBBlack
ResolvedBBlack
ResolvedBBlack
ResolvedBBlack
ResolvedCCogdill_WMF
DeclinedBBlack
DuplicateBBlack
ResolvedBBlack
ResolvedBBlack
ResolvedBBlack
ResolvedBBlack
ResolvedBBlack
ResolvedBBlack
ResolvedBBlack
Resolvedema
OpenBBlack
DuplicateNone

Event Timeline

BBlack created this task.Jun 15 2016, 6:43 PM
Restricted Application added subscribers: Zppix, Aklapper. · View Herald TranscriptJun 15 2016, 6:43 PM

Note: based on simple test python and javascript clients, websocket client libraries tend to not support 301 redirects to HTTPS. So we'll probably have to go through a slightly-painful migration here as we did with T105794 with some user notification and timelines, and then watch un-observant clients get broken :/