HTTPS links to wordpress.org

[johnbillion]

It appears that wordpress.org now favours an SSL connection, although it is not currently enforced. ​Googling for WordPress returns a link to https://wordpress.org and once you're on the site, the HTTPS links persist.

We should convert all wordpress.org links in the dashboard to HTTPS links.

Any objections?

[nacin]

None. It'll be enforced soon.

[Ipstenu]

XMLRPC diff'd

[Ipstenu]

Readme

[Ipstenu]

wp login

[Ipstenu]

Everything (except wp-content files for obv reasons)

[Ipstenu]

I did three on their own and then I THINK I got it with the all, but given the rapid movement of WP, it may not be a great idea to use that. I omitted wp-content from my search/replace, since I didn't want to accidentally touch themes and plugins.

[Ipstenu]

Missed some.

[johnbillion]

There's a good deal more than this. There's codex.wordpress.org, make.wordpress.org, and planet.wordpress.org links too.

Additionally, the feed URLs in wp-admin/includes/dashboard.php shouldn't change in case the site can't perform outgoing SSL requests.

[markjaquith]

Refreshed. Rolled back a few. Anything that is used by the server to make requests should NOT be changed.

[nacin]

In 27369:

Reference ​https://wordpress.org rather than ​http://wordpress.org in strings, links, comments, etc.

props Ipstenu, markjaquith.
see #27115.

[nacin]

I also removed the generator-like links used in XML-RPC (<engineLink>) and <meta generator> tags.

[nacin]

In 27469:

Use SSL when linking to WordPress.org. see #27115.

[johnbillion]

Moving to Future Release for the Codex, Make and Planet links.

[bravokeyl]

Codex links ..

[bravokeyl]

What about trac.wordpress.org/* links ?

[netweb]

27115.2.patch refreshes bravokeyl 27115.patch​ above against develop trunk includes /wp-config-sample.php

[netweb]

Also available are the following domains and are SSL enabled:

• ​http://httpd.apache.org
• ​http://www.mysql.com/
• ​http://php.net/ & ​http://www.php.net/

[markjaquith]

In 29787:

Use HTTPS links for planet.wordpress.org

see #27115

[markjaquith]

In 29788:

Use HTTPS URLs for core.trac.wordpress.org

see #27115

[markjaquith]

In 29789:

Use HTTPS URLs for trac.wordpress.org (and use core.trac.wordpress.org)

see #27115

[nacin]

Replying to markjaquith:

In 29787:

Use HTTPS links for planet.wordpress.org

see #27115

FWIW, planet.wordpress.org isn't yet forced SSL due to mixed content warnings. Will be worked on in ​#meta634.

[TobiasBg]

There are multiple links to ​http://wordpress.org/ URLs in Core, core themes, unit tests, makepot, ... that do get redirected to ​https:// and therefore should be converted.

make also seems to be redirecting. planet and codex don't, yet.

[Ipstenu]

More wordpress.org links to https

[Ipstenu]

Added 27115.wporg.diff - more of the wordpress.org URLs

Looking at the codex, I don't know if we want to force that over yet, since I know we're slowly weaning the codex away. not that it would be BAD to...

[Jayjdk]

Is wp-admin/setup-config.php supposed to be changed in 27115.wporg.diff?

[nacin]

Yes to forcing the Codex. I'm not sure there's anything on *.wordpress.org that isn't forced SSL at this point.

[johnbillion]

Needs a patch for codex.wordpress.org links. Moving this to 4.2 to avoid a load of late string changes.

[iseulde]

See comment above.

[MikeHansenMe]

codex links

[DrewAPicture]

Looks like 27115.codex.diff​ needs a refresh in wp-admin/user-edit.php:

patching file src/wp-admin/user-edit.php
Hunk #2 FAILED at 273.
1 out of 2 hunks FAILED

[johnbillion]

I was talking to ocean90 about this. Him and I are going to coordinate the remaining change so we don't trigger the need for translators to re-translate the huge number of strings which are affected.

[SergeyBiryukov]

In 31839:

Bundled themes: Use SSL for theme and author URIs.

props mercime.
fixes #31699. see #27115.

[johnbillion]

#31882 was marked as a duplicate.

[ramiy]

Codex links

[ramiy]

readme.txt & wp-config-sample.php

[ocean90]

In 32116:

Use HTTPS URLs for codex.wordpress.org.

see #27115.

[ocean90]

Remaining ​http://wordpress.org links.

[johnbillion]

Remaining ​http://wordpress.org links.

See comment 4 and comment 6 regarding feed URLs.

[johnbillion]

In 34783:

Switch the remaining user-facing links to wordpress.org over to HTTPS.

Fixes #27115

[johnbillion]

In 34784:

shttp is not a protocol.

See #27115

[netweb]

Commits above go back to the 3.9 milestone, fixed tickets needs a milestone, the last commit will ship in 4.4, 4.4 it is