Opened 2 years ago
Last modified 19 months ago
#56276 new enhancement
Check hosting compatibility for Mobile Application to work with the site
Reported by: | oglekler | Owned by: | |
---|---|---|---|
Milestone: | Awaiting Review | Priority: | normal |
Severity: | normal | Version: | |
Component: | Site Health | Keywords: | |
Focuses: | Cc: |
Description
Some hosting companies are closing XML-RPC for better security, but if customers will ask for it to be white listed, it can be done.
This way attentive user can discover that there is mobile application which can be used and also if there are obstacles for this.
For more information about this issue with hostings, recording from 'WordPress Portsmouth Online Meetup – 20th July 2022 – WordPress Mobile Apps' can be viewed.
Change History (4)
This ticket was mentioned in Slack in #mobile by clorith. View the logs.
2 years ago
#3
@
2 years ago
What is the Mobile teams current implementation strategy for moving away from XML-RPC and to the core REST API for example? This would negate the need for XML-RPC entirely, and I would love to hear from the team about that.
Given the application-specific password flow, this should be technically feasible. That said, I wouldn't expect this work to get on the roadmap prior to the completion of the [WordPress App Simplification project]https://make.wordpress.org/mobile/2022/07/27/refocusing-the-wordpress-app-on-core-features/.
Speaking personally – I would be very keen to see this happen, it's just a matter of finding the time for it.
Given that there are various security-related precautions that one needs to be aware of by enabling XML-RPC, I'm wondering if there are better ways to address this than throwing a recommendation that they may want to ask their host to enable this.
What is the Mobile teams current implementation strategy for moving away from XML-RPC and to the core REST API for example? This would negate the need for XML-RPC entirely, and I would love to hear from the team about that.