SSL for planet.wordpress.org

[nacin]

This will require filtering the content and routing any non-SSL images through a proxy.

[iandunn]

Related ​wp:#27115

[obenland]

@otto42 Do you know if this has ever been completed?

[Otto42]

@obenland The planet site now defaults to https like all other w.org sites, and all the sites we're pulling from are now https, with the one exception of Dougal Campbell's blog.

So, if we remove that site, or get him to get a cert, then this will be effectively completed.

[obenland]

Thanks, I sent him a note

[dougal]

Sorry, I just became aware of this conversation. I thought I had already set up HTTPS for my blog, but apparently not (I set up letsencrypt on another server, but not the one my main blog runs on). I'll have it updated soon.

[dougal]

Sorry, I forgot to come back and update. SSL implemented:

​https://dougal.gunters.org/blog/tag/wordpress/feed/

[obenland]

Thanks!

[hlashbrooke]

It looks like planet.wordpress.org is still accessible over a non-SSL connection: ​http://planet.wordpress.org/

​SSL does work, but it isn't forced if you use the vanilla http URL.

[ocean90]

#4071 was marked as a duplicate.

[ocean90]

#4771 was marked as a duplicate.

[dd32]

​https://make.wordpress.org/systems/2020/11/06/force-ssl-for-https-planet-wordpress-org-can/