Page MenuHomePhabricator

samarium.wikimedia.org should support HTTPS
Closed, ResolvedPublic

Description

I keep getting redirected to https://samarium.wikimedia.org/ by HTTPS Everywhere in Chrome. It'd be nice if this worked.


Version: wmf-deployment
Severity: enhancement
URL: https://samarium.wikimedia.org/

Details

Reference
bz46827

Event Timeline

bzimport raised the priority of this task from to Low.Nov 22 2014, 1:37 AM
bzimport added projects: HTTPS, acl*sre-team.
bzimport set Reference to bz46827.
bzimport added a subscriber: Unknown Object (MLST).

mwalker wrote:

We're working on it but this is not a high priority. Alternatively you can file a bug with the EFF for making software that doesn't actually work in 100% of cases and doesn't gracefully degrade.

(In reply to comment #1)

We're working on it but this is not a high priority.

Okay. Good to know.

Alternatively you can file a bug with the EFF for making software that
doesn't actually work in 100% of cases and doesn't gracefully degrade.

I believe Roan has worked on this on GitHub. I think they accept pull requests. We provided some of the rules at some point, but surely we didn't tell them that everything under *.wikimedia.org would support HTTPS. Perhaps the rules need tweaking here or the fallback logic needs a once-over or there's not enough reporting to the user or something. I agree that it should be investigated.

This bug is about the Wikimedia side of things.

(In reply to comment #2)

(In reply to comment #1)

We're working on it but this is not a high priority.

Okay. Good to know.

Alternatively you can file a bug with the EFF for making software that
doesn't actually work in 100% of cases and doesn't gracefully degrade.

I believe Roan has worked on this on GitHub. I think they accept pull
requests.
We provided some of the rules at some point, but surely we didn't tell them
that everything under *.wikimedia.org would support HTTPS. Perhaps the rules
need tweaking here or the fallback logic needs a once-over or there's not
enough reporting to the user or something. I agree that it should be
investigated.

This bug is about the Wikimedia side of things.

They're here: https://git.torproject.org/https-everywhere.git
Rules are in src/chrome/content/rules/Wikimedia.xml
It expects all Wikimedia hosts to support HTTPS except the ones covered by the exclusion patterns:
^http://(apt|bayes|bayle|brewster|bug-attachment|commonsprototype\.tesla\.usability|commons\.prototype|cs|cz|dataset2|de\.prototype|download|dumps|ekrem|emery|en\.prototype|ersch|etherpad|flaggedrevssandbox|flgrevsandbox|gallium|ganglia|ganglia3|harmon|hume|ipv4\.labs|ipv6and4\.labs|jobs|mlqt\.tesla\.usability|mobile\.tesla\.usability|m|nagios|oldusability|project2|prototype|results\.labs|search|shop|sitemap|snapshot3|stafford|stats|status|test\.prototype|torrus|ubuntu|wiki-mail|yongle|wikitech|wlm)\.wikimedia\.org
^http://(static|download)\.wikipedia\.org/

mwalker wrote:

Samarium is know available via SSL at https://frdata.wikimedia.org/