Last modified: 2012-05-05 21:55:57 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T25004, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 23004 - noc.wikimedia.org should support HTTPS
noc.wikimedia.org should support HTTPS
Status: RESOLVED FIXED
Product: Wikimedia
Classification: Unclassified
Site requests (Other open bugs)
unspecified
All All
: Normal enhancement (vote)
: ---
Assigned To: Nobody - You can work on this!
: shell
: 32066 35739 (view as bug list)
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2010-03-30 14:53 UTC by Umherirrender
Modified: 2012-05-05 21:55 UTC (History)
8 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments
Updated (4.04 KB, text/html)
2012-02-08 21:36 UTC, Sam Reed (reedy)
Details

Description Umherirrender 2010-03-30 14:53:43 UTC
Please allow https connect to noc.wikimedia.org. Thanks.
Comment 1 Sam Reed (reedy) 2010-03-30 14:59:24 UTC
Why?
Comment 2 Umherirrender 2010-03-30 18:14:04 UTC
Why not?
There are many user, who use the secure server, why there should not view the config of the Wikimedia Projects with https, when it is possible to view all other of the Wikimedia Projects.

Sysadmins: Please make this as INVALID, when there is no need for a secure server for noc.wikimedia.org. Thanks.
Comment 3 Sam Reed (reedy) 2010-03-30 18:23:59 UTC
Invalid, there is NO reason to do this. It's public data, and no logins.
Comment 4 Sam Reed (reedy) 2010-03-30 18:24:58 UTC
bug 17517 might have some relevance

But this is still invalid
Comment 5 Max Semenik 2010-03-30 18:28:55 UTC
Secure connections are intended to prevent loss of sensitive information
transitioned from user to server and vice versa. Noc is a read-only site,
readable by everyone - no need to protect the data sent to the user. And data
in requests from user to server is also free from sensitive data - because SUL
cookies aren't set blindly for *.wikimedia.org, your Wikipedia session cookies
cannot be sniffed from your noc.wikimedia.org traffic.
Comment 6 MZMcBride 2011-11-02 03:38:33 UTC
*** Bug 32066 has been marked as a duplicate of this bug. ***
Comment 7 MZMcBride 2011-11-02 03:39:40 UTC
Re-opening per Ryan's comment (copied below from bug 32066 comment 8):

> I don't think it's necessary to have this argument every time a bug is
> submitted for services that don't have https, so... For every service we have,
> if it is feasible to do https, we should do https.
Comment 8 Umherirrender 2012-02-02 20:22:33 UTC
Works now, but some links should be changed to protocol relative links and the image should load over a protocol relative link.

Thanks.
Comment 9 Daniel Zahn 2012-02-07 09:50:01 UTC
changed to relative pathes / protocol agnostic:

"Server configuration"
"MediaWiki profiling information"
"Core dbs"

changed to always use https://:

"Bugzilla"
"Blog"
"Wikimedia Subversion Repository"

unchanged due to existing issues: (have tickets)

"Ganglia"
"ServerAdminLog"

won't fix:

"Wikimedia Downloads" (dumps)
Comment 10 billinghurst 2012-02-07 11:31:48 UTC
status.wikimedia.org is one that gives a warning for the certificate
Comment 11 billinghurst 2012-02-07 11:32:48 UTC
stats.wikimedia.org in https asks for web login
Comment 12 Daniel Zahn 2012-02-07 11:50:52 UTC
@billinghurst: ACK, just that those are not really related to noc.wm and have their own tickets.

status.wikimedia.org is an alias for status.watchmouse.com., so not directly under our control but we still have an open ticket to proxy it (RT #1849).

stats.wikimedia is in BZ 32143
Comment 15 Sam Reed (reedy) 2012-02-08 21:36:06 UTC
Created attachment 9970 [details]
Updated

Fixed in attachment

I really need to get my git setup working...
Comment 16 Sam Reed (reedy) 2012-04-05 20:32:21 UTC
*** Bug 35739 has been marked as a duplicate of this bug. ***
Comment 17 Sam Reed (reedy) 2012-04-05 20:39:01 UTC
(In reply to comment #15)
> Created attachment 9970 [details]
> Updated
> 
> Fixed in attachment
> 
> I really need to get my git setup working...

Committed in https://gerrit.wikimedia.org/r/#change,4367
Comment 18 Daniel Zahn 2012-04-10 11:45:32 UTC
merged
Comment 19 Thehelpfulone 2012-05-05 21:55:57 UTC
Seems to have been fixed.

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links