[04:09:57] 07HTTPS, 10Traffic, 06Discovery, 06Operations, and 2 others: Consider switching to HTTPS for Wikidata query service links - https://phabricator.wikimedia.org/T153563#2885616 (10Smalyshev) @Esc3300 please see above about the difference between entity identifiers and URLs. @MZMcBride if you mean links that... [08:06:59] 07HTTPS, 10Traffic, 06Discovery, 06Operations, and 2 others: Consider switching to HTTPS for Wikidata query service links - https://phabricator.wikimedia.org/T153563#2885870 (10Esc3300) As Smalyshev mentions, traditionally http may be used, but there isn't really a rule against using https. Traditionally m... [13:13:10] 10Traffic, 06Operations, 13Patch-For-Review: Decom bits.wikimedia.org hostname - https://phabricator.wikimedia.org/T107430#2886903 (10Tbayer) >>! In T107430#2882009, @fgiunchedi wrote: >>>! In T107430#2881955, @fgiunchedi wrote: >> I'm not sure how to change that and how it is set from though > > @Krenair p... [15:29:11] 07HTTPS, 10Traffic, 06Discovery, 06Operations, and 2 others: Consider switching to HTTPS for Wikidata query service links - https://phabricator.wikimedia.org/T153563#2884289 (10MisterSynergy) FWIW: https://www.mediawiki.org/wiki/Talk:Wikidata_query_service#Links_in_query_results_should_be_https.2C_not_http [16:16:44] 10Traffic, 06Operations, 13Patch-For-Review: Strip query string in varnish upload - https://phabricator.wikimedia.org/T153336#2887188 (10BBlack) 05Open>03Resolved a:03BBlack [16:17:09] 10Traffic, 06Operations: Standardize varnish applayer backend definitions - https://phabricator.wikimedia.org/T147844#2887192 (10BBlack) [16:17:12] 10Traffic, 06Operations, 10Wikimedia-Stream, 13Patch-For-Review: Move rcstream to an LVS service - https://phabricator.wikimedia.org/T147845#2887190 (10BBlack) 05Open>03Resolved a:03BBlack [16:18:21] 10Traffic, 06Operations, 13Patch-For-Review: Switch port 80 to nginx on primary clusters - https://phabricator.wikimedia.org/T107236#2887195 (10BBlack) [16:18:25] 07HTTPS, 10Traffic, 06Operations, 07Tracking: HTTPS Plans (tracking / high-level info) - https://phabricator.wikimedia.org/T104681#2887196 (10BBlack) [16:18:26] 07HTTPS, 10Traffic, 06Operations, 06Performance-Team, and 2 others: HTTPS-only for stream.wikimedia.org - https://phabricator.wikimedia.org/T140128#2887193 (10BBlack) 05Open>03declined We're going to leave this as-is and assume eventstream replacement (which will be HTTPS-only from the get-go) will han... [16:27:27] 07HTTPS, 10Traffic, 06Operations, 10Wikimedia-Blog: Switch blog to HTTPS-only - https://phabricator.wikimedia.org/T105905#2887209 (10BBlack) @EdErhart-WMF - Any update on setting the appropriate Strict-Transport-Security header on this service? [16:30:00] 07HTTPS, 10Traffic, 06Operations, 10Wikimedia-Shop: store.wikimedia.org HTTPS issues - https://phabricator.wikimedia.org/T128559#2887212 (10BBlack) @PPena (or anyone) - who's responsible in the WMF for store.wikimedia.org? This is a pretty basic request and it's been outstanding for months. It's one of t... [16:33:18] 07HTTPS, 10Traffic, 06Operations, 07Tracking: HTTPS Plans (tracking / high-level info) - https://phabricator.wikimedia.org/T104681#2887213 (10BBlack) [16:47:29] 10Traffic, 06Analytics-Kanban, 10EventBus, 06Operations, and 2 others: Productionize and deploy Public EventStreams - https://phabricator.wikimedia.org/T143925#2887270 (10BBlack) [17:27:26] 07HTTPS, 10Traffic, 06Discovery, 06Operations, and 2 others: Consider switching to HTTPS for Wikidata query service links - https://phabricator.wikimedia.org/T153563#2884289 (10DSGalaktos) FWIW, there was also a bit of discussion about this on PC following the initial WDQS Beta announcement: https://www.wi... [18:24:23] 07HTTPS, 10Traffic, 06Operations, 10Wikimedia-Shop: store.wikimedia.org HTTPS issues - https://phabricator.wikimedia.org/T128559#2887702 (10Dzahn) found quote from a mail from Seddon //"Change in management.. Wikipedia Store project has moved under Michael Beattie.. Sandra Hust [2] will be the primary cont... [19:25:41] 10Traffic, 06Operations, 07Wikimedia-Incident: Deploy redundant unified certs - https://phabricator.wikimedia.org/T148131#2887903 (10BBlack) Status update - Digicert unified certs (RSA+ECDSA) are now deployed and stapled alongside the GlobalSign ones on all cache terminators. They're not being used for user... [19:42:39] 10Traffic, 06Operations, 07Wikimedia-Incident: Deploy redundant unified certs - https://phabricator.wikimedia.org/T148131#2887935 (10BBlack) In case such an incident happens before the changes in January and I'm not around, the procedure to switch GlobalSign to Digicert globally would be: 1) Commit a change...