1416798 - Update the /zh-CN/ to firefox.com.cn redirect to use https

Status: VERIFIED FIXED

(www.mozilla.org :: Bedrock, enhancement)

Description

[Hector Zhao [:hectorz]]

See bug 1415544 comment 5, we cannot yet unconditionally switch the /zh-CN/ to firefox.com.cn redirect to https due to lack of SHA-1 fallback support of Chinese CDN providers.

But "to try to serve downloads securely if we can" (bug 1415544 comment 9), :pmac and I talked about one possibility:

> 
> <hectorz> For the existing https://www.mozilla.org/zh-CN/ =>
> http://www.firefox.com.cn/ redirect, I'm not sure if it's possible to somehow
> get the SHA-2 awareness information from cloudflare and redirect users to
> https/http based on that.
> <@pmac> hectorz: huh... that might be possible... I think cloudflare can send
> us a header indicating which they're using
> 

File this bug to track this.

Comment 1

[Hector Zhao [:hectorz]]

Looks like SHA-1 fallback was disabled for bedrock [1][2], I think the redirect can be updated to use https now. I'll send a PR soon.

[1]: https://bugzil.la/1452400#c2
[2]: https://github.com/mozilla/bedrock/issues/5567#issue-312704168

Comment 2

[GitHub Bugzilla PR Linker]

Attachment: Link to GitHub pull-request: https://github.com/mozilla/bedrock/pull/5595

Comment 3

[[github robot]]

Commit pushed to master at https://github.com/mozilla/bedrock

https://github.com/mozilla/bedrock/commit/54082f23f902282b56a068f2b5a4a110835e5d44
Bug 1416798 - Update the /zh-CN/ to firefox.com.cn redirect to use https.

Comment 4

[Yanfang Liu]

Verified!