Risker wrote:
Okay, perhaps I wasn't clear. What I am referring
to are editors from
China or Iran who regularly log into projects that will be covered with
HTTPS, as we know that HTTPS is (at least sometimes) blocked in those
countries. Remember that you're including Commons, Meta, and all English
projects - and yes, it is the right thing to do. But we do have a
non-negligible number of users (including administrators and stewards) who
will need to have a way to access these projects. Do you have a way to
exempt them?
My understanding from <https://bugzilla.wikimedia.org/29898> is that as of
August 20, 2013, there is now a user preference that can toggle HTTP/HTTPS
as being required. This is similar to what Gmail and others do (default to
HTTPS, allow it to be disabled via a user preference). I'm not totally
sure how users will be able to reach their user preferences if they can't
log in, though.
MZMcBride