4 ms·

We've been working on this for quite a while and several parts of the solution deal with rewriting embedded URLs using HTTP. If you have any examples of breakag

We've been working on this for quite a while and several parts of the solution deal with rewriting embedded URLs using HTTP. If you have any examples of breakage, let us know.

toomuchtodo 11y ago
Any plans to use HSTS and preloads header to default to SSL in browsers for Wordpress-hosted sites?
- barsxl 11y ago
  Yes, we're working on it.
CharlesW 11y ago
> If you have any examples of breakage, let us know. I believe it's breaking podcast feeds being served with WordPress.com, because iTunes doesn't support Let's Encrypt certificates. https://www.dominicrodger.com/2016/02/29/lets-encrypt-itunes-podcasts/ https://www.dominicrodger.com/2016/02/29/lets-encrypt-itunes... This may not affect a lot of customers (since WordPress.com doesn't support PowerPress for feed generation), but I know some podcasters create feeds by hand or with other apps. This issue will cause at least some podcasts to disappear from iTunes without warning unless you can coordinate with Apple to fix it.
- barsxl 11y ago
  > I believe it's breaking podcast feeds being served with WordPress.com, because iTunes doesn't support Let's Encrypt certificates. Do you have an example? We have already implemented workarounds for iTunes. If they aren't working I would love to know the specifics so we can fix it.
  - CharlesW 11y ago
    > Do you have an example? Just the confirmation from Apple's podcaster support team that iTunes doesn't support sites which use Let's Encrypt. (I don't use WordPress.com myself.) I've just posted a request for examples in popular podcasting groups, and I'll let you know when/if I get responses. > We have already implemented workarounds for iTunes. Can you elaborate just a smidge? Is WordPress.com, for example, not encrypting content when it's requested by iTunes? (Thanks!)
    - barsxl 11y ago
      > Can you elaborate just a smidge? Is WordPress.com, for example, not encrypting content when it's requested by iTunes? (Thanks!) Yes, we have some targeted exceptions for incompatible clients.
nachtigall 11y ago
How do you handle that users might embed external http images in a page? Can't you somehow warn about this during editing? Asking because that's the problem I see at my site currently (https://groni50.org https://groni50.org). In this case I'll just upload the external images to our site. I'll also brief our users. But I wonder if something couldn't be averted/checked in the wysiwyg editor.

We've been working on this for quite a while and several parts of the solution deal with rewriting embedded URLs using HTTP. If you have any examples of breakage, let us know.

toomuchtodo 11y ago

Any plans to use HSTS and preloads header to default to SSL in browsers for Wordpress-hosted sites?

barsxl 11y ago
Yes, we're working on it.

CharlesW 11y ago

> If you have any examples of breakage, let us know. I believe it's breaking podcast feeds being served with WordPress.com, because iTunes doesn't support Let's Encrypt certificates. https://www.dominicrodger.com/2016/02/29/lets-encrypt-itunes-podcasts/ https://www.dominicrodger.com/2016/02/29/lets-encrypt-itunes... This may not affect a lot of customers (since WordPress.com doesn't support PowerPress for feed generation), but I know some podcasters create feeds by hand or with other apps. This issue will cause at least some podcasts to disappear from iTunes without warning unless you can coordinate with Apple to fix it.

barsxl 11y ago
> I believe it's breaking podcast feeds being served with WordPress.com, because iTunes doesn't support Let's Encrypt certificates. Do you have an example? We have already implemented workarounds for iTunes. If they aren't working I would love to know the specifics so we can fix it.
- CharlesW 11y ago
  > Do you have an example? Just the confirmation from Apple's podcaster support team that iTunes doesn't support sites which use Let's Encrypt. (I don't use WordPress.com myself.) I've just posted a request for examples in popular podcasting groups, and I'll let you know when/if I get responses. > We have already implemented workarounds for iTunes. Can you elaborate just a smidge? Is WordPress.com, for example, not encrypting content when it's requested by iTunes? (Thanks!)
  - barsxl 11y ago
    > Can you elaborate just a smidge? Is WordPress.com, for example, not encrypting content when it's requested by iTunes? (Thanks!) Yes, we have some targeted exceptions for incompatible clients.

nachtigall 11y ago

How do you handle that users might embed external http images in a page? Can't you somehow warn about this during editing? Asking because that's the problem I see at my site currently (https://groni50.org https://groni50.org). In this case I'll just upload the external images to our site. I'll also brief our users. But I wonder if something couldn't be averted/checked in the wysiwyg editor.