Closed
Bug 938566
Opened 11 years ago
Closed 10 years ago
FirefoxOS page on mozilla.org is not redirected to https
Categories
(Infrastructure & Operations Graveyard :: WebOps: Product Delivery, task)
Infrastructure & Operations Graveyard
WebOps: Product Delivery
Tracking
(Not tracked)
RESOLVED
FIXED
People
(Reporter: arroway, Unassigned)
References
Details
(Whiteboard: [kanban:https://kanbanize.com/ctrl_board/4/186] )
http://www.mozilla.org/en-US/firefoxos/ and http://www.mozilla.org/en-US/firefox/os/ are not redirected to https.
Updated•11 years ago
|
Assignee: nobody → ptheriault
Updated•11 years ago
|
Component: Security Assurance → Gaia
Product: mozilla.org → Firefox OS
Version: other → unspecified
Comment 1•11 years ago
|
||
Stéphanie, this is a gaia concern right? Can you make this bug block the review bug (or link the wiki secreview related to this).
Can you elaborate a little on your concerns too? From memory the issue was having http link hardcoded in code, when https versions were available - is that correct?
Flags: needinfo?(stephouillon)
Comment 2•11 years ago
|
||
How is this related to Gaia exactly? Can I get clear STR here?
Reporter | ||
Comment 3•11 years ago
|
||
Paul, it is not related to Firefox OS at all. It's something I noticed on desktop, it is IT related (https redirection as set on the web server) as I intended to specify in the product/component description. So I'll move it back, if it's not good at least it will not mislead to FirefoxOS!
Flags: needinfo?(stephouillon)
Reporter | ||
Comment 4•11 years ago
|
||
Well, I can't change it back to what I want, I guess you'll be able to.
Updated•11 years ago
|
Component: Gaia → General
Product: Firefox OS → www.mozilla.org
Updated•11 years ago
|
Assignee: ptheriault → nobody
Updated•11 years ago
|
Assignee: nobody → server-ops-webops
Component: General → WebOps: SSL and Domain Names
Product: www.mozilla.org → Infrastructure & Operations
QA Contact: nmaul
Version: unspecified → other
Updated•11 years ago
|
Component: WebOps: SSL and Domain Names → WebOps: Product Delivery
Comment 5•11 years ago
|
||
this would require adding a http->https redirect across the entire bedrock (www) service. we do something similar across other projects, but i'd like to tread carefully with this in production to avoid causing mixed content issues this may cause for people linking to the site. i am going to wrap in a couple of the bedrock developers for their thoughts here.
Flags: needinfo?(pmac)
Flags: needinfo?(jmize)
OS: Linux → All
Hardware: x86_64 → All
Comment 6•11 years ago
|
||
Is there a reason this page in particular needs to be HTTPS more than others? We can force individual pages in the bedrock code, but we're only doing that as needed until we fix the issues preventing us from making the site fully HTTPS only (which is bug 358384 as :jgmize added).
Flags: needinfo?(pmac)
Reporter | ||
Comment 7•11 years ago
|
||
When I noticed that, it was because these URLs were (and still are) hardcoded in gaia builds. It has waited until now, so I guess it can wait a little bit more for bug 358384 to be resolved.
Updated•10 years ago
|
Whiteboard: [kanban:https://kanbanize.com/ctrl_board/4/186]
Updated•8 years ago
|
Product: Infrastructure & Operations → Infrastructure & Operations Graveyard
You need to log in
before you can comment on or make changes to this bug.
Description
•