Change Details

As briefly discussed on irc with @elukey and documented in T210411, we need origin servers to be accessible via TLS. When it comes to Analytics, this should mean that analytics-tool100[1-3] (and possibly others that I might have forgotten?) need to be accessible via https. Certificates should include the following in the X509v3 Subject Alternative Name field: [x] hue.wikimedia.org [x] yarn.wikimedia.org - pivot.wikimedia.org - turnilo.wikimedia.org [x] superset.wikimedia.org - analytics.wikimedia.org - stats.wikimedia.org - piwik.wikimedia.org

As briefly discussed on irc with @elukey and documented in T210411, we need origin servers to be accessible via TLS. When it comes to Analytics, this should mean that analytics-tool100[1-3] (and possibly others that I might have forgotten?) need to be accessible via https. Certificates should include the following in the X509v3 Subject Alternative Name field: [x] hue.wikimedia.org [x] yarn.wikimedia.org [x] pivot.wikimedia.org [x] turnilo.wikimedia.org [x] superset.wikimedia.org [x] analytics.wikimedia.org [x] stats.wikimedia.org - piwik.wikimedia.org

As briefly discussed on irc with @elukey and documented in T210411, we need origin servers to be accessible via TLS. When it comes to Analytics, this should mean that analytics-tool100[1-3] (and possibly others that I might have forgotten?) need to be accessible via https. Certificates should include the following in the X509v3 Subject Alternative Name field: [x] hue.wikimedia.org [x] yarn.wikimedia.org -[x] pivot.wikimedia.org -[x] turnilo.wikimedia.org [x] superset.wikimedia.org -[x] analytics.wikimedia.org -[x] stats.wikimedia.org - piwik.wikimedia.org