While we redirect http://wiki.gentoo.org to https://wiki.gentoo.org at server level, mails created by the Mediawiki software still contains http://wiki.gentoo.org addresses allowing MITM attacks in theory. Please update Mediawiki settings to change default URL to https (I guess you have to touch $wgServer setting).
I think I fixed this. Can anyone do a test?
Doesn't work. My test test case: 1. Create a Wiki page somewhere and watch it. 2. Let someone else edit the page to get notificated. 3. Check notification mail for HTTP links (should be all HTTPS) I got: > Dear Whissi, > > The Gentoo Wiki page User:Whissi/Test:test1 has been changed on > 6 June 2017 by Klausmann, see > http://wiki.gentoo.org/wiki/User:Whissi/Test:test1 for the current > revision. > > See > http://wiki.gentoo.org/index.php?title=User:Whissi/Test:test1&diff=next&oldid=647710 > to view this change. > > See > http://wiki.gentoo.org/index.php?title=User:Whissi/Test:test1&diff=0&oldid=647710 > for all changes since your last visit. > > Editor's summary: - > > Contact the editor: > mail: http://wiki.gentoo.org/wiki/Special:EmailUser/Klausmann > wiki: http://wiki.gentoo.org/wiki/User:Klausmann > > There will be no other notifications in case of further activity unless > you visit this page while logged in. You could also reset the > notification flags for all your watched pages on your watchlist. > > Your friendly Gentoo Wiki notification system > > -- > To change your email notification settings, visit > http://wiki.gentoo.org/wiki/Special:Preferences > > To change your watchlist settings, visit > http://wiki.gentoo.org/wiki/Special:EditWatchlist > > To delete the page from your watchlist, visit > http://wiki.gentoo.org/index.php?title=User:Whissi/Test:test1&action=unwatch > > Feedback and further assistance: > https://wiki.gentoo.org/wiki/Special:MyLanguage/Help:Contents
This should be deployed. Please test.
Verified in a recent email
Thanks, Brian!
