Talk:Requests for comment/MediaWiki HTTPS policy

Questions

 * Is the purpose of the proposed IP-based blacklist to account for geolocation (China, Iran) and the Wikipedia Zero exceptions?
 * How would the list of IPs be created and updated? Would it be hardcoded, or part of a list that's editable on-wiki? I can imagine admins or Stewards asking for the latter, but OTOH, a single shared list between wikis would make more sense for cluster-wide consistency.

Ping for comment. Steven Walling (talk) 05:05, 26 November 2014 (UTC)


 * Yep, the IP-based list is for China, Iran, and Zero. I envision the policies being setup in the mediawiki config by default (I'm aiming the syntax to be roughly like setting up group rights in LocalSettings), but the process can be extended by other extensions. So if Zero wants to update the policy based on the wiki page in zero portal (which they will), they'll be able to do so. But I'm not planning to implement that in core, since it's going to be pretty specific to the use case (Zero portal being a great example-- it's on a separate wiki, has it's own rules for editing, but it should be easy for them to implement a hook that looks up their cached set of configs and applies it on all wikis). CSteipp (WMF) (talk) 06:08, 26 November 2014 (UTC)