Page MenuHomePhabricator

[wikitech] Use SSL in interwiki map for WMF wikis
Closed, ResolvedPublic

Description

there is the text

"leaving a request on this page (MediaWiki.org) (this is recommended"

which links to

http://www.mediawiki.org/wiki/Developer_access...

Would someone be so kind to convert that to protocol neutral. I am told that it it is done by the interwiki map that labs uses and to post this bz.

Thanks.


Version: unspecified
Severity: enhancement
See Also:
https://bugzilla.wikimedia.org/show_bug.cgi?id=68751

Details

Reference
bz35826

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 22 2014, 12:18 AM
bzimport set Reference to bz35826.

changed summary: use SSL in interwiki map for WMF wikis

protorel is semi pointless because that wiki doesn't allow viewing (anon or logged in) with cleartext HTTP (redirects everyone to HTTPS); so we can just hard code all of them to be HTTPS URLs.

Enforcing secure protocol from labsconsole is just as problematic where people have logged in with http: in other (home) wikis, it just reverses the problem.

This situation is not just for (hacker|geek)ville, it has to work more broadly for the masses where our pushing protocols but not entirely has people falling in and out of their logins.

Until there is a global policy about security protocols, and a clear plan to manage it, this modification to my request is problematic.

PS. It would be useful that if there is a summary change that the original summary could be retained somewhere.

Old subject was "Protocol neutral link from https://labsconsole.wikimedia.org/wiki/Help:Access#Giving_users_Labs_access.2C_if_they_don.27t_already_have_SVN_access"

(In reply to comment #2)

Enforcing secure protocol from labsconsole is just as problematic where people
have logged in with http: in other (home) wikis, it just reverses the problem.

I don't understand but surely it's not relevant to this bug. Maybe you could explain on IRC? (to be clear: labsconsole is not an SUL wiki and not even on the cluster (I think?) and AFAIK it's been forcing everyone to use SSL/TLS since it was initially created)

[...]

Until there is a global policy about security protocols, and a clear plan to
manage it, this modification to my request is problematic.

Again, I don't follow. labsconsole seems to be an independent that doesn't interact with or even know about any of the other wikis run by the foundation. and they don't know about it. (accepting maybe commons. but that could be instantcommons for all I know.)

PS. It would be useful that if there is a summary change that the original
summary could be retained somewhere.

It's recorded in the history (see the link next to the bug's modification time. next to the CC list at the top of the page) and in the email notifications about the change.

I wonder if this was this done as part of bug 68751?

(In reply to billinghurst from comment #0)

there is the text

"leaving a request on this page (MediaWiki.org) (this is recommended"

where is "there" please?

(In reply to Daniel Zahn from comment #5)

(In reply to billinghurst from comment #0)

there is the text

"leaving a request on this page (MediaWiki.org) (this is recommended"

where is "there" please?

It was covered in comment #2

Old subject was "Protocol neutral link from https://labsconsole.wikimedia.org/wiki/Help:Access#Giving_users_Labs_access.2C_if_they_don.27t_already_have_SVN_access"

I think that it is probably redundant as labsconsole has bitten the dust in that form, and the page has been rewritten. The underlying aspect was that labsconsole apparently used a different interwiki mapping than the universal, and that now seems to not be the case. Others may wish to confirm that.

Krenair claimed this task.

I dumped the result of Interwiki::getAllPrefixes() from labswiki (wikitech) and it seems OK:

krenair@silver:~$ grep "http:" interwikis | grep wikimedia.org
    string(40) "http://download.wikimedia.org/$1/latest/"
    string(32) "http://releases.wikimedia.org/$1"
    string(29) "http://stats.wikimedia.org/$1"
    string(35) "http://www.wikimedia.org.ar/wiki/$1"
    string(31) "http://wikimedia.org.au/wiki/$1"
    string(30) "http://www.wikimedia.org.il/$1"
    string(47) "http://wikimedia.org.ph/wmph/index.php?title=$1"
    string(31) "http://wikimedia.org.ve/wiki/$1"
    string(31) "http://wikimedia.org.za/wiki/$1"

Most Wikimedia sites have protocol-relative links in there, which is fine because wikitech is SSL-only. Those few that don't which (listed above) are manually configured as such at https://meta.wikimedia.org/wiki/Interwiki_map and the same would apply on all WMF wikis.