Change Details

When accessing URLs over HTTPS from my IPv6 connection, I get the following header: > Set-Cookie: GeoIP=NL::52.3667:4.9000:v4; Path=/; Domain=.wikinews.org I'm obviously not in the Netherlands — this is geolocating esams' IPs. Non-HTTPS hits do not exhibit the same issue, nor are non-IPv6. This explains why this has gone undetected for as long as it has.

When accessing URLs over HTTPS from my IPv6 connection, I get the following header: > Set-Cookie: GeoIP=NL::52.3667:4.9000:v4; Path=/; Domain=.wikinews.org I'm obviously not in the Netherlands — this is geolocating esams' IPs (the cookie was introduced in https://gerrit.wikimedia.org/r/#/c/119014/ ). Non-HTTPS hits do not exhibit the same issue, nor are non-IPv6. This explains why this has gone undetected for as long as it has.

When accessing URLs over HTTPS from my IPv6 connection, I get the following header: > Set-Cookie: GeoIP=NL::52.3667:4.9000:v4; Path=/; Domain=.wikinews.org I'm obviously not in the Netherlands — this is geolocating esams' IPs (the cookie was introduced in https://gerrit.wikimedia.org/r/#/c/119014/ ). Non-HTTPS hits do not exhibit the same issue, nor are non-IPv6. This explains why this has gone undetected for as long as it has.