I am able to stay on HTTPS on the shop *up until* the site gets to asking me to log in and *then* it sends me to HTTP.
?!
Once a user is on HTTPS, keep them there.
Version: wmf-deployment
Severity: major
URL: https://shop.wikimedia.org/
See Also:
https://bugzilla.wikimedia.org/show_bug.cgi?id=37790
(In reply to jeremyb from comment #0)
Once a user is on HTTPS, keep them there.
Or just require HTTPS (cf. bug 37790).
(In reply to MZMcBride from comment #1)
Or just require HTTPS (cf. bug 37790).
Yup. But if not then at least do this.
I wasn't aware of this bug, so thanks for pointing it out! I'm going to talk with James Alexander and the people at Shopify to find out what has already been done to work on this and what we can do.
Hi Caitlin, any news/progress here, as this ticket was called the "main focus" in bug 37790 three months ago?
Hi Andre,
Thanks for the ping. I just updated bug 37790. In short, Shopify wasn't able to help us in the way we had hoped, so we're trying to get fr-tech to work on it. We need to work on getting some more technical resources for the shop specifically, and hope to see that happening this summer.
the shop does not run on WMF infra but external on shopify.com and isn't operated by the operations team. so i'm afraid ops and traffic can't do much here unless we'd stop outsourcing this to shopify.
Seems shopify only use https for checkout transaction.
Similar report earlier in last year:
https://phabricator.wikimedia.org/T96749