[websec] FYI: Wikimedia Foundation Turns On HTTPS and HSTS, Including Wikipedia

Tobias Gondrom <tobias.gondrom@gondrom.org> Sat, 13 June 2015 13:40 UTC

Return-Path: <tobias.gondrom@gondrom.org>
X-Original-To: websec@ietfa.amsl.com
Delivered-To: websec@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7B2951A88A9 for <websec@ietfa.amsl.com>; Sat, 13 Jun 2015 06:40:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -93.965
X-Spam-Level:
X-Spam-Status: No, score=-93.965 tagged_above=-999 required=5 tests=[BAYES_50=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FH_HELO_EQ_D_D_D_D=1.597, HELO_DYNAMIC_IPADDR=1.951, HELO_EQ_DE=0.35, HELO_MISMATCH_DE=1.448, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_WHITELIST=-100] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rDMKMGZZjohz for <websec@ietfa.amsl.com>; Sat, 13 Jun 2015 06:40:54 -0700 (PDT)
Received: from lvps5-35-241-16.dedicated.hosteurope.de (www.gondrom.org [5.35.241.16]) (using TLSv1.1 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5627E1A88C4 for <websec@ietf.org>; Sat, 13 Jun 2015 06:40:35 -0700 (PDT)
Received: from [192.168.178.31] (x590f7cb5.dyn.telefonica.de [89.15.124.181]) by lvps5-35-241-16.dedicated.hosteurope.de (Postfix) with ESMTPSA id AB04B631E1 for <websec@ietf.org>; Sat, 13 Jun 2015 15:40:33 +0200 (CEST)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=default; d=gondrom.org; b=nfZKCWOPgisOV863FznDDJDffdJY8/YiSIo6r23z3WeN8S58QOfU3YpWCnnh4DNSQ23pW4oAOx5O93YjnVxptZRx732xxEgxwwbhJJ6IRVVbrckiDgLyUHkuG6mJtU6kcf51VdzldJhFAxr7RMRdWp93gnJqVXVaoQ2EHpIWt8U=; h=Message-ID:Date:From:User-Agent:MIME-Version:To:Subject:X-Priority:References:In-Reply-To:X-Forwarded-Message-Id:Content-Type:Content-Transfer-Encoding;
Message-ID: <557C32D1.1040507@gondrom.org>
Date: Sat, 13 Jun 2015 15:40:33 +0200
From: Tobias Gondrom <tobias.gondrom@gondrom.org>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0
MIME-Version: 1.0
To: websec@ietf.org
X-Priority: 4 (Low)
References: <38CB4537-786F-4C4A-BF41-A5B67BDE1855@gondrom.org>
In-Reply-To: <38CB4537-786F-4C4A-BF41-A5B67BDE1855@gondrom.org>
X-Forwarded-Message-Id: <38CB4537-786F-4C4A-BF41-A5B67BDE1855@gondrom.org>
Content-Type: text/plain; charset="utf-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Archived-At: <http://mailarchive.ietf.org/arch/msg/websec/Vr2LGEGLf7BaHYd2z3djibTHHMk>
Subject: [websec] FYI: Wikimedia Foundation Turns On HTTPS and HSTS, Including Wikipedia
X-BeenThere: websec@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: Web Application Security Minus Authentication and Transport <websec.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/websec>, <mailto:websec-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/websec/>
List-Post: <mailto:websec@ietf.org>
List-Help: <mailto:websec-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/websec>, <mailto:websec-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 13 Jun 2015 13:40:56 -0000

Hi all,

I thought this might be nice to read for some of us:
Good news, Wikipedia is turning on HSTS. :-)

http://techcrunch.com/2015/06/12/the-wikimedia-foundation-turns-on-https-by-default-across-all-sites-including-wikipedia/

Have a nice weekend, Tobias