1332560 - Filed on behalf of Nick Nguyen. https://phonebook.mozilla.org/ on mobile

Status: RESOLVED FIXED

(Webtools Graveyard :: Phonebook, defect)

Description

[Mike Poessy [:mpoessy]]

If you type "phonebook.mozilla.org" on a mobile browser it will default to http and not https, since the forwarding rules aren't set up, this results in a blank page. I've observed folks like Mayo erroneously believe that they either have the wrong url or the site is down as a result. Thanks!

Comment 1

[:Atoll]

Phonebook was prohibited from having an HTTP variant some time ago by security reviews. While this is annoying, it's only a problem once per device. It's not ideal, and exposes a weakness with the "HTTPS everything" approach: browsers don't bother trying HTTPS if they can't reach HTTP.

Infosec, can we spin up an http-to-https redirect for phonebook, for usability and etc?

Comment 2

[Jeff Bryner [:jeff] (use NEEDINFO 😉)]

certainly: https://wiki.mozilla.org/Security/Guidelines/Web_Security#HTTP_Redirections

Comment 3

[:Atoll]

$ curl http://phonebook.mozilla.org/
curl: (7) Failed to connect to phonebook.mozilla.org port 80: Connection refused

Apparently modern browsers don't do well with this particular scenario, which is what's causing Phonebook trouble.

Comment 4

[April King [:April]]

I don't have any particular objection unless jeff does.

Comment 5

[:Atoll]

We've fixed this with bug 1317533, it should now work as intended.