Remove support of HTTP at library.kiwix.org

kiwix / operations

Kiwix Kubernetes Cluster

http://charts.k8s.kiwix.org/

5 stars 0 forks source link

Closed kelson42 closed 10 months ago

kelson42 commented 1 year ago

This would be replaced by a redirection to HTTPS

The main reason is that I worry about the security/concern for user not taking care (so they might be monitored in "demo" mode of library.kiwix.org).

rgaudin commented 1 year ago

Assign it to me should you decide to go forth with it. As listed elsewhere, current reasons not to enforce HTTPS:

systems with broken date system (battery dead) are not able to use HTTPS. Google and many other services work (not WP though).
can be (rarely) useful to check zimit-ZIMs behavior outside the Secure Context

kelson42 commented 10 months ago

systems with broken date system (battery dead) are not able to use HTTPS. Google and many other services work (not WP though).

seems not significat enough case to counter balance the benefits.

can be (rarely) useful to check zimit-ZIMs behavior outside the Secure Context

We should keep dev.library.kiwix.org available via http for this.

@kelson42 please implement the redirect https -> https

rgaudin commented 10 months ago

@kelson42 please implement the redirect https -> https