Tyler Romeo wrote:
On Mon, Aug 19, 2013 at 9:32 PM, MZMcBride z@mzmcbride.com wrote:
My understanding from https://bugzilla.wikimedia.org/29898 is that as of August 20, 2013, there is now a user preference that can toggle HTTP/HTTPS as being required. This is similar to what Gmail and others do (default to HTTPS, allow it to be disabled via a user preference). I'm not totally sure how users will be able to reach their user preferences if they can't log in, though.
Just to clarify a bit: this is a moot problem, because disabling HTTPS in your user preferences does *not* disable login over HTTPS. Once this is deployed, *all* logins (as in absolutely all of them on whatever projects it is enabled on) will be over HTTPS.
I'm not sure that counts as moot. People incapable of using HTTPS will simply be locked out of their accounts indefinitely? How many users will this affect?
I wonder if making it possible to toggle this user preference via e-mail would make sense. Wikimedia wikis are too large and too diverse to not expect that a certain percent of users won't be able to use HTTPS. I'd really like to avoid losing these users. Of course even a "toggle by e-mail" option still wouldn't solve the login issue. Hmmm.
(And if the user preference isn't meant to serve those who can't use HTTPS, who is it intended to serve?)
MZMcBride