Risker wrote:
Okay, perhaps I wasn't clear. What I am referring to are editors from China or Iran who regularly log into projects that will be covered with HTTPS, as we know that HTTPS is (at least sometimes) blocked in those countries. Remember that you're including Commons, Meta, and all English projects - and yes, it is the right thing to do. But we do have a non-negligible number of users (including administrators and stewards) who will need to have a way to access these projects. Do you have a way to exempt them?
My understanding from https://bugzilla.wikimedia.org/29898 is that as of August 20, 2013, there is now a user preference that can toggle HTTP/HTTPS as being required. This is similar to what Gmail and others do (default to HTTPS, allow it to be disabled via a user preference). I'm not totally sure how users will be able to reach their user preferences if they can't log in, though.
MZMcBride