On Aug 20, 2013, at 12:03 PM, James Alexander jalexander@wikimedia.org wrote:
Yeah, this seems to contradict what I thought Ryan was saying above and what I was under the impression for. The bad use case for here (as describe by Risker for example) is a mainland china user from zhWiki logging in (through http) but now not being able to visit enWiki logged in at all (because it will force them to https and https is blocked).
Posed for sake of argument, assuming this interpretation is correct:
This is unacceptable and a blocking bug to this rollout.
The suggested "just find an excepted project and log in there first" is neither easy nor self-evident enough to be effective for those users. The silent failure mode they will encounter will effectively be a silent site outage for them.
The change must be delayed until people geographically / nationally denied HTTPS can log in again.
Sent from Kangphone