Page MenuHomePhabricator

Tony_Tan_98 (Tony Tan)
User

Projects

User does not belong to any projects.

Today

  • Clear sailing ahead.

Tomorrow

  • Clear sailing ahead.

Thursday

  • Clear sailing ahead.

User Details

User Since
Nov 24 2014, 5:00 AM (486 w, 1 d)
Availability
Available
IRC Nick
Tony_Tan_98
LDAP User
Unknown
MediaWiki User
Tony Tan [ Global Accounts ]

Recent Activity

Jun 18 2015

Restricted Application added a project to T102367: Migrate tools.wmflabs.org to https only (and set HSTS): Cloud-Services.
Jun 18 2015, 4:57 AM · User-bd808, User-QEDK, Patch-For-Review, cloud-services-team (Kanban), SRE, Traffic, HTTPS, Toolforge

Jun 14 2015

Tony_Tan_98 added a comment to T40516: Enable HSTS on Wikimedia sites.

But why is the max-age only 1 day? Is that just for now while we test it out?

Probably yes. The ability to quickly assess and revert the change has been pointed out several times by ops on T49832.

Jun 14 2015, 3:23 AM · SRE, Traffic, HTTPS

Jun 13 2015

Tony_Tan_98 added a comment to T40516: Enable HSTS on Wikimedia sites.

I noticed that HSTS was enabled for English Wikipedia following the announcements here. But why is the max-age only 1 day? Is that just for now while we test it out?

Jun 13 2015, 2:12 AM · SRE, Traffic, HTTPS
Tony_Tan_98 added a comment to T102315: pywikibot support for https-only.

It is good to be careful but I am sure the WMF will keep the servers listening on HTTP and serve 301 redirects to HTTPS.

Jun 13 2015, 2:07 AM · Patch-For-Review, Pywikibot

May 10 2015

Tony_Tan_98 added a comment to T49832: Force all Wikimedia cluster traffic to be over SSL for all users (logged-in and anon).

Information: Mozilla announced plan to deprecate Non-Secure HTTP: https://blog.mozilla.org/security/2015/04/30/deprecating-non-secure-http/

May 10 2015, 4:42 AM · SRE, Traffic, HTTPS-by-default, HTTPS

Apr 17 2015

Tony_Tan_98 added a comment to T49832: Force all Wikimedia cluster traffic to be over SSL for all users (logged-in and anon).

I see. Just for your reference, the English Wikipedia community had a discussion (https://en.wikipedia.org/wiki/Wikipedia:Village_pump_(proposals)/Archive_120#Should_Wikipedia_use_HTTPS_by_default_for_all_readers.3F) about this and while many points were made on both sides, the conclusion from that community was that this issue is to be decided by the WMF/developers. So good luck with your analysis, and I hope that any possible issues can be resolved soon so that we can make the switch in the near future. Thanks.

Apr 17 2015, 2:48 PM · SRE, Traffic, HTTPS-by-default, HTTPS
Tony_Tan_98 added a comment to T49832: Force all Wikimedia cluster traffic to be over SSL for all users (logged-in and anon).

I see that the HTTPS infrastructure is now able to serve HTTPS-by-default (https://www.mediawiki.org/w/index.php?title=Wikimedia_Engineering%2F2014-15_Goals&diff=1535407&oldid=1519260). That's great! Any updates on the actual implementation? Thanks.

Apr 17 2015, 2:58 AM · SRE, Traffic, HTTPS-by-default, HTTPS

Mar 28 2015

Tony_Tan_98 added a comment to T49832: Force all Wikimedia cluster traffic to be over SSL for all users (logged-in and anon).

That's great to hear! Thanks.

Mar 28 2015, 3:00 AM · SRE, Traffic, HTTPS-by-default, HTTPS

Mar 25 2015

Tony_Tan_98 added a comment to T49832: Force all Wikimedia cluster traffic to be over SSL for all users (logged-in and anon).

Just to let everyone know, HTTPS traffic to desktop Wikimedia sites is no longer blocked in China. However, HTTPS to the mobile sites is still disrupted. I say this from personal experience, but here is a site to back it up: https://en.greatfire.org/https/en.wikipedia.org
https://en.greatfire.org/https/en.m.wikipedia.org

Mar 25 2015, 1:20 AM · SRE, Traffic, HTTPS-by-default, HTTPS

Dec 15 2014

Tony_Tan_98 added a comment to T76050: Grant tboverride-account instead of tboverride to account creators.

While there is not an official consensus yet, there are currently 12 supports and 0 opposes at the English Wikipedia Village Pump.

Dec 15 2014, 8:29 PM · Wikimedia-Site-requests