HomePhabricator

Transactions T94125 Change Details

Change Details

Old
New
Diff

@halfak and I noticed this earlier. * Log in to a Wikimedia wiki * Browse to /w/api.php?action=query&meta=userinfo via HTTP (not HTTPS) * See "You are centrally logged in. Reload the page to apply your user settings." * Reload page * No change. The login would've happened over HTTPS but this is unencrypted. * Load page via HTTPS instead * Now you're shown as logged in

@halfak and I noticed this earlier. * Log in to a Wikimedia wiki * Browse to /w/api.php?action=query&meta=userinfo via HTTP (not HTTPS) * See "You are centrally logged in. Reload the page to apply your user settings." * Reload page * No change. The login would've happened over HTTPS but this is unencrypted. * Load page via HTTPS instead * Now you're shown as logged in

Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL