You are browsing a read-only backup copy of Wikitech. The live site can be found at wikitech.wikimedia.org

News/HTTPS enforcement at shared proxy

From Wikitech-static
< News
Revision as of 20:49, 18 August 2020 by imported>BryanDavis (→‎What is changing?: add note about HSTS header)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigation Jump to search
Tracked in Phabricator
Task T120486

The web proxy service for Cloud VPS projects is enforcing TLS encryption by automatically redirecting from HTTP to HTTPS.

What is changing?

  • Requests to *.wmcloud.org and *.wmflabs.org hosts via the domain proxy service enforce TLS encryption
  • Strict-Transport-Security header added to TLS secured responses instructing user-agents to automatically upgrade http:// requests to https:// for the next 24 hours.

Timeline

  • Yes Done 2020-08-18: TLS enforced for GET and HEAD requests and Strict-Transport-Security header with one day duration sent to clients.
  • 2021-02-01: TLS enforced for all requests and Strict-Transport-Security header with one year duration sent to clients.
Retrieved from "https://wikitech-static.wikimedia.org/w/index.php?title=News/HTTPS_enforcement_at_shared_proxy&oldid=543086"