Page MenuHomePhabricator

RFC: MediaWiki HTTPS policy
Closed, ResolvedPublic

Event Timeline

csteipp claimed this task.
csteipp raised the priority of this task from to Medium.
csteipp updated the task description. (Show Details)
csteipp changed Security from none to None.
csteipp moved this task from Backlog to In Dev/Progress on the MediaWiki-Core-Team board.
csteipp subscribed.
This comment has been deleted.

ArchiCom meeting:

The current RFC states that Wikipedia Zero partners often disallow HTTPS. I'm wondering how we can address that.

Ignore it. Wikimedia can put a fork in production if they feel it necessary.

But from the Wikimedia side, a good start would be to stop agreeing to allow HTTPS blocking.

The current RFC states that Wikipedia Zero partners often disallow HTTPS. I'm wondering how we can address that.

It's hard to imagine that this is going to be a sustainable policy for long, if it even is today. Wikipedia's transition only contributes to that, and as major media sites transition over the next year, it's only going to become a more and more difficult posture for any organization to take.

This seems to be more about MediaWiki software than Wikimedia ops, but note that since Wikimedia has switched fully to HTTPS, there are no longer Wikimedia concerns about this (including e.g Zero).