Login to http://phabricator.wikimedia.org ends up in an ugly error message. I guess we shouldn't allow anybody to login from http in the first place? Only https (which seems to work just fine).
Description
Description
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | Qgil | T553 Engineering Community team goals for October 2014 | |||
| Resolved | Qgil | T174 Launch Wikimedia Phabricator Day 1 | |||
| Declined | Qgil | T375 Aligning Phabricator account restrictions with Wikimedia's | |||
| Resolved | • mmodell | T258 Publicly show which MediaWiki.org account a Phabricator account is associated with | |||
| Resolved | • chasemp | T463 Enable registration for everybody at phabricator.wikimedia.org | |||
| Resolved | • chasemp | T346 configure LDAP and SUL for phab instance | |||
| Resolved | • mmodell | T186 Implement WMF SUL Authentication | |||
| Resolved | • chasemp | T465 phabricator.wikimedia.org kicks you out too soon | |||
| Resolved | • chasemp | T457 Login with http throws ugly error |
Event Timeline
Comment Actions
Hmm, guess that https://gerrit.wikimedia.org/r/#/c/160588/ and https://gerrit.wikimedia.org/r/#/c/160780/ was only for the backend.
Proposing to enforce/redirect to https.
Comment Actions
Yes, we should enforce HTTPS-only on Phabricator. We've done it on Gerrit & Bugzilla for years.