On Sat, 10 Mar 2012 10:58:19 -0800, MZMcBride z@mzmcbride.com wrote:
Hi.
https://bugzilla.wikimedia.org/show_bug.cgi?id=29898 is about adding a user preference for HTTP vs. HTTPS while a user is logged in.
I'd really like to see this bug resolved, as I regularly encounter HTTP links and the lack of auto-redirection is becoming a larger and larger usability problem for me. (I don't use HTTPS-Everywhere on my personal computer.)
I have a few questions for this list:
- Does a user preference make sense here? I argued on that bug that
adding an intermediate user preference seems a bit silly (letting the user shoot themselves in the foot), but it's apparently common to give the user a choice (Gmail, Twitter, Facebook, etc. all allow a choice).
(This next question is for Wikimedia ops.)
- If a user preference is implemented and the default is set to HTTPS, is
the current infrastructure ready for the increased load? That is, if the code were magically ready tomorrow, could HTTPS be immediately deployed as a default for logged-in users without causing any problems?
MZMcBride
I believe the idea of a HTTPS preference was WONTFIXed under the premise that the final goal is to have all logged in users unconditionally using https.