Skip to content
This repository has been archived by the owner on Jul 24, 2021. It is now read-only.

redirect looses ssl #4753

Closed
openstreetmap-trac opened this issue Jul 23, 2021 · 6 comments
Closed

redirect looses ssl #4753

openstreetmap-trac opened this issue Jul 23, 2021 · 6 comments

Comments

@openstreetmap-trac
Copy link

Reporter: skyper
[Submitted to the original trac issue database at 8.43pm, Monday, 21st January 2013]

The redirect from https://wiki.osm.org/ is leading to http and not https.

Please, keep the protocol. Thanks

@openstreetmap-trac
Copy link
Author

Author: TomH
[Added to the original trac issue at 7.11pm, Wednesday, 23rd January 2013]

This is deliberate - as SSL is (relatively) expensive we only offer it for the login process on the wiki and everything else is directed back to normal http.

@openstreetmap-trac
Copy link
Author

Author: skyper
[Added to the original trac issue at 12.51am, Thursday, 24th January 2013]

Replying to [comment:1 TomH]:

This is deliberate - as SSL is (relatively) expensive we only offer it for the login process on the wiki and everything else is directed back to normal http.

That is not true. https is working for wiki and trac but many do not know. (comment:5:ticket:3914)

Only the redirect does not work for the wiki.

I already wrote 18 month ago, that there are methods to use proxies / caching on a machine using http and loopbacks and then only encrypt connections to other machine. An example would be http://linksunten.indymedia.org. I could get more info about the setup if needed.

@openstreetmap-trac
Copy link
Author

Author: TomH
[Added to the original trac issue at 1.00am, Thursday, 24th January 2013]

Thank you, but lessons in sucking eggs are not required. We are in fact already running a proxy in front of the wiki to help with the load.

Yes, you are right that trac is now globally enabled, because it gets a lot less use.

The wiki machine is fairly well loaded however, and the wiki gets a lot of use, hence why https is discouraged there. It may be possible to access it in that way but the intention is that only login traffic is passed over https which is why logins direct to https and then back to http afterwards.

Certainly accessing osm.org over https is not something we would recommend as we have no certificate for that name.

@openstreetmap-trac
Copy link
Author

Author: skyper
[Added to the original trac issue at 1.30am, Thursday, 24th January 2013]

Replying to [comment:3 TomH]:

Certainly accessing osm.org over https is not something we would recommend as we have no certificate for that name.

Ok, I can live with typing the complete name and just was irritated by the "broken" redirection.

@openstreetmap-trac
Copy link
Author

Author: skyper
[Added to the original trac issue at 4.28pm, Tuesday, 26th February 2013]

It got even worse. Right now I am send to plain http on many redirects like https://wiki.openstreetmap.org.

This is definitely a bug.

@openstreetmap-trac
Copy link
Author

Author: openstreetmap[at]firefishy.com
[Added to the original trac issue at 7.12am, Tuesday, 10th September 2013]

SSL now fully enabled. Lets see how the hardware handles.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

1 participant