On Mon, Aug 19, 2013 at 9:32 PM, MZMcBride
<z(a)mzmcbride.com> wrote:
My understanding from
<https://bugzilla.wikimedia.org/29898> is that as
of August 20, 2013, there is now a user preference that can toggle
HTTP/HTTPS as being required. This is similar to what Gmail and others
do (default to HTTPS, allow it to be disabled via a user preference).
I'm not totally sure how users will be able to reach their user
preferences if they can't log in, though.
Just to clarify a bit: this is a moot problem, because disabling HTTPS in
your user preferences does *not* disable login over HTTPS. Once this is
deployed, *all* logins (as in absolutely all of them on whatever projects
it is enabled on) will be over HTTPS.
I'm not sure that counts as moot. People incapable of using HTTPS will
simply be locked out of their accounts indefinitely? How many users will
this affect?
I wonder if making it possible to toggle this user preference via e-mail
would make sense. Wikimedia wikis are too large and too diverse to not
expect that a certain percent of users won't be able to use HTTPS. I'd
really like to avoid losing these users. Of course even a "toggle by
e-mail" option still wouldn't solve the login issue. Hmmm.
(And if the user preference isn't meant to serve those who can't use
HTTPS, who is it intended to serve?)
MZMcBride