You are browsing a read-only backup copy of Wikitech. The live site can be found at wikitech.wikimedia.org
News/HTTPS enforcement at shared proxy
< NewsJump to navigation Jump to search
Revision as of 18:03, 2 February 2021 by (Mark tracking task as resolved)
What is changing?
- Requests to *.wmcloud.org and *.wmflabs.org hosts via the domain proxy service enforce TLS encryption
- Strict-Transport-Security header added to TLS secured responses instructing user-agents to automatically upgrade http:// requests to https:// for the next 24 hours.
- Done 2020-08-18: TLS enforced for GET and HEAD requests and Strict-Transport-Security header with one day duration sent to clients.
- Done 2021-02-02: TLS enforced for all requests and Strict-Transport-Security header with one year duration sent to clients.