> This seems good, but too limited. Why not make it so that wikipedia can only be served over HTTPS?
That's what they're doing. From the second paragraph: "We will also use HTTP Strict Transport Security (HSTS)"
That's what they're doing. From the second paragraph: "We will also use HTTP Strict Transport Security (HSTS)"
* HSTS requires HTTPS connections
* Internet.org (currently) requires HTTP only [1]
* But Wikipedia is a member of Internet.org [2]
I'm curious how Wikipedia will handle this. Perhaps allowing Facebook to MITM?Or maybe the security mentioned in the original article isn't intended for those who can't afford it[3].
[1] https://developers.facebook.com/docs/internet-org/platform-technical-guidelines
[2] https://internet.org/press/introducing-the-internet-dot-org-app
[3] https://en.wikipedia.org/wiki/Wikipedia_Zero