Page MenuHomePhabricator

Login with http throws ugly error
Closed, ResolvedPublic

Description

Login to http://phabricator.wikimedia.org ends up in an ugly error message. I guess we shouldn't allow anybody to login from http in the first place? Only https (which seems to work just fine).

Event Timeline

Qgil assigned this task to chasemp.
Qgil raised the priority of this task from to High.
Qgil updated the task description. (Show Details)
Qgil changed Security from none to None.
Qgil added subscribers: Qgil, Aklapper.

Hmm, guess that https://gerrit.wikimedia.org/r/#/c/160588/ and https://gerrit.wikimedia.org/r/#/c/160780/ was only for the backend.

Proposing to enforce/redirect to https.

Yes, we should enforce HTTPS-only on Phabricator. We've done it on Gerrit & Bugzilla for years.