On Fri, Jun 17, 2011 at 4:15 PM, Victor Vasiliev <vasilvv(a)gmail.com> wrote:
On Sat, Jun 18, 2011 at 3:11 AM, Brion Vibber
<brion(a)pobox.com> wrote:
* email
What about user preference for cases like this? With four options:
"Prefer HTTP", "Prefer HTTPS", "Force HTTP", "Force
HTTPS".
The current case is that you get whatever was the current setting on the web
server at the time the email got formatted (which usually means, either HTTP
or HTTPS depending on *someone else's usage*) or it defaults to HTTP for
something formatted from default.
Currently MediaWiki doesn't have a native notion of multiple
hostname/protocol availability and it's done by lightly patching
configuration at runtime when loaded over HTTPS. Unless something is added,
that'll continue in the same way.
My personal preference would be to run *all* logged-in activity over HTTPS,
so every mail link etc should be on SSL. But I think that's still a ways out
yet and will need better SSL acceleration; poor Ryan Lane will kill me if I
keep pushing on that too soon! ;)
-- brion