News/HTTPS enforcement at shared proxy

From Wikitech
Tracked in Phabricator
Task T120486 Resolved

The web proxy service for Cloud VPS projects is enforcing TLS encryption by automatically redirecting from HTTP to HTTPS.

What is changing?

  • Requests to *.wmcloud.org and *.wmflabs.org hosts via the domain proxy service enforce TLS encryption
  • Strict-Transport-Security header added to TLS secured responses instructing user-agents to automatically upgrade http:// requests to https:// for the next 24 hours.

Timeline

  • Yes Done 2020-08-18: TLS enforced for GET and HEAD requests and Strict-Transport-Security header with one day duration sent to clients.
  • Yes Done 2021-02-02: TLS enforced for all requests and Strict-Transport-Security header with one year duration sent to clients.
Retrieved from "https://wikitech.wikimedia.org/w/index.php?title=News/HTTPS_enforcement_at_shared_proxy&oldid=1896564"