So, the concept URI is http.
Perhaps we should:

• Make the link very obviously marked as not secure?
• Remove the link, possibly providing the concept URI in plain text on the page info page?

Thoughts @Lydia_Pintscher ?

In T226453#5280633, @Addshore wrote:

So, the concept URI is http.

Do we not support https concept URIs?

See T153563#2884409 and the comment added in https://gerrit.wikimedia.org/r/#/c/operations/mediawiki-config/+/473292/8/wmf-config/InitialiseSettings.php

The concept URI should be http.

Another option might be to change what this link says and then use https?

In T226453#5280660, @Addshore wrote:

See T153563#2884409 and the comment added in https://gerrit.wikimedia.org/r/#/c/operations/mediawiki-config/+/473292/8/wmf-config/InitialiseSettings.php

That's interesting because schema.org supports either and is (eventually) migrating to https:
https://schema.org/docs/faq.html#19

I think since the URI is a redirect anyways (and is rather confusing if you don't know that), then my preference would be to show it as plaintext (maybe at the bottom of the page in the "footer")?

Maybe somewhere near "This page was last edited on 17 June 2019, at 18:54." text.

I think we need to think about this more globally together with T109420 and T85633 to come up with a suitable solution.

Wikidata seems to lag in terms of implementation of https compared to other parts of WMF. Can we do something about it?

In T226453#5289510, @Esc3300 wrote:

Wikidata seems to lag in terms of implementation of https compared to other parts of WMF. Can we do something about it?

Wikidata does implement https everywhere.
The concept URI however is a slightly trickier issue being a linked data identifier.
But switching to https is possible but would require planing, communication etc.

In T153563#2884409 @Smalyshev said:

Thus, I do not think we should change our identifier scheme to diverge from what is used in every other linked data application.

I wonder if the norm is switching toward https now? Perhaps we should follow?

In T226453#5294638, @Addshore wrote:

I wonder if the norm is switching toward https now? Perhaps we should follow?

It kinda appears (from what I can tell) that either is supported. When using the URI as a URL, on every single one of the examples on T153563#2884409, you get redirected to https. However, the pages then list the URL as http.

I didn't dig too deeply into the docs, but schema.org for sure explicitly mentions that either is supported. Perhaps that's a good strategy for us? default to http, but allow https?

or perhaps the simplest solution is to display it plaintext, though, we probably ought to also support https in WDQS, etc.

In T226453#5280633, @Addshore wrote:

So, the concept URI is http.
Perhaps we should:

• Make the link very obviously marked as not secure?
• Remove the link, possibly providing the concept URI in plain text on the page info page?

I find the second option is a good option, on the page info page and/or somewhere on the entity page itself.

The link in the toolbox is a bit disappointing because it goes to the very same page after 3 redirects (whose one using http):

• http://www.wikidata.org/entity/Q1
• https://www.wikidata.org/entity/Q1
• https://www.wikidata.org/wiki/Special:EntityData/Q1
• https://www.wikidata.org/wiki/Q1

And as said above it is not really a locator but an identifier, so there is no need to use it as a link, even if it works. I guess the main uses of this identifier is for federated SPARQL queries from other SPARQL endpoints or more generally for exported data.

In T226453#5296385, @dbarratt wrote:

I didn't dig too deeply into the docs, but schema.org for sure explicitly mentions that either is supported. Perhaps that's a good strategy for us? default to http, but allow https?

https://schema.org/docs/faq.html#19 is talking about using https for schema.,org based uris, not for all uris.

I just looked at the .ttl output for an entity and it actually currently outputs:

@prefix wdata: <https://www.wikidata.org/wiki/Special:EntityData/> .

heh

wdata: is not the concept uri though. wd: is the thing, wdata: is Wikidata page talking about the thing. We consciously separated them in the data.

In T226453#5297810, @Addshore wrote:

https://schema.org/docs/faq.html#19 is talking about using https for schema.,org based uris, not for all uris.

Well I would assume so, that is the only domain they have the authority to talk about.

As pointed out, the concept URI is http, not https. See also https://www.w3.org/DesignIssues/Security-NotTheS.html . It's too widespread now to change it. For Commons we could do https from the start