Bug 610080 – Update preferences to use HTTPS

• Product: Websites
• Status: RESOLVED FIXED

[Description Thomas Deutschmann (RETIRED) 2017-02-20 12:44:38 UTC]

While we redirect http://wiki.gentoo.org to https://wiki.gentoo.org at server level, mails created by the Mediawiki software still contains http://wiki.gentoo.org addresses allowing MITM attacks in theory.

Please update Mediawiki settings to change default URL to https (I guess you have to touch $wgServer setting).

[Comment 1 Matthew Marchese 2017-06-06 07:09:04 UTC]

I think I fixed this. Can anyone do a test?

[Comment 2 Thomas Deutschmann (RETIRED) 2017-06-06 08:31:43 UTC]

Doesn't work. My test test case:

1. Create a Wiki page somewhere and watch it.

2. Let someone else edit the page to get notificated.

3. Check notification mail for HTTP links (should be all HTTPS)

I got:

> Dear Whissi,
> 
> The Gentoo Wiki page User:Whissi/Test:test1 has been changed on
> 6 June 2017 by Klausmann, see
> http://wiki.gentoo.org/wiki/User:Whissi/Test:test1 for the current
> revision. 
> 
> See
> http://wiki.gentoo.org/index.php?title=User:Whissi/Test:test1&diff=next&oldid=647710
> to view this change.
> 
> See
> http://wiki.gentoo.org/index.php?title=User:Whissi/Test:test1&diff=0&oldid=647710
> for all changes since your last visit.
> 
> Editor's summary:  -  
> 
> Contact the editor:
> mail: http://wiki.gentoo.org/wiki/Special:EmailUser/Klausmann
> wiki: http://wiki.gentoo.org/wiki/User:Klausmann
> 
> There will be no other notifications in case of further activity unless
> you visit this page while logged in. You could also reset the
> notification flags for all your watched pages on your watchlist.
> 
> Your friendly Gentoo Wiki notification system
> 
> --
> To change your email notification settings, visit
> http://wiki.gentoo.org/wiki/Special:Preferences
> 
> To change your watchlist settings, visit
> http://wiki.gentoo.org/wiki/Special:EditWatchlist
> 
> To delete the page from your watchlist, visit
> http://wiki.gentoo.org/index.php?title=User:Whissi/Test:test1&action=unwatch
> 
> Feedback and further assistance:
> https://wiki.gentoo.org/wiki/Special:MyLanguage/Help:Contents

[Comment 3 Brian Evans (RETIRED) 2018-11-28 19:51:32 UTC]

This should be deployed.  Please test.

[Comment 4 Brian Evans (RETIRED) 2018-11-29 19:35:40 UTC]

Verified in a recent email

[Comment 5 Matthew Marchese 2018-11-29 19:37:59 UTC]

Thanks, Brian!