1448570 - http://bugzilla.mozilla.org must redirect to https://bugzilla.mozilla.org

Status: VERIFIED WORKSFORME

(Infrastructure & Operations Graveyard :: WebOps: Other, task)

Description

[Darkspirit]

Attachment: Screenshot_20180324_180107.png

curl -I http://bugzilla.mozilla.org/ 
= https://www.hardenize.com/report/bugzilla.mozilla.org/1521910781#www_http

Firefox users are save: https://searchfox.org/mozilla-central/rev/56274d0a016a6833e5da7770ce70580b6f5abb21/security/manager/ssl/nsSTSPreloadList.inc#5646

If you have some strange vpn-internal clients that only can connect via http:// please set up a rule, e.g. by using the nginx geo module.

Comment 1

[Shyam Mani [:fox2mike]]

I can't seem to reproduce this on my end from multiple machines : 

[shyam@spike ~]$ curl -I -L http://bugzilla.mozilla.org
HTTP/1.1 301 Moved Permanently
Content-Length: 178
Content-Type: text/html
Date: Mon, 26 Mar 2018 16:45:55 GMT
Location: https://bugzilla.mozilla.org/
Connection: keep-alive 

shyam@aloy ~ $ curl -I -L http://bugzilla.mozilla.org
HTTP/1.1 301 Moved Permanently
Content-Length: 178
Content-Type: text/html
Date: Mon, 26 Mar 2018 16:45:22 GMT
Location: https://bugzilla.mozilla.org/
Connection: keep-alive 


We never want to serve Bugzilla over http, so we automatically redirect to https, that's expected behaviour.

Comment 2

[Darkspirit]

(In reply to Jan Andre Ikenmeyer [:darkspirit] from comment #0)
> Created attachment 8962067 [details]
vs.
https://www.hardenize.com/report/bugzilla.mozilla.org/1522083613#www_http

Verified: Someone has fixed it. Thank you!