HTTP request on HTTPS translatewiki.net

HTTP request on HTTPS translatewiki.net

Every time I open new page on translatewiki.net (while connected through https) in Internet Explorer, I get warning message if I want to view unsafe content (http requests). I intercepted traffic with Fiddler and found out that the only http request is to http://freegeoip.net/json/?callback=mw.uls.setGeo. Can this request be somehow avoided? These repeating browser's messages are really annoying.

Domen (talk)11:08, 5 October 2012

If you happen to find free geoip service that supports https... Otherwise we would have to proxy it which increases latency.

Nike (talk)08:37, 6 October 2012

Is there any option to disable this geoip extension or cache data in cookie and stop making requests after first request? Most of these http requests get HTTP 304 Not Modified response. Proxy maybe increases latency, but these browser's warning messages largely increase time to show page—if I want to make 10 translations, I have to cancel at least 20 warning boxes (one before editing and one after save).

Domen (talk)11:14, 6 October 2012

What a stupid browser. Is using http not an option to you?

Nike (talk)13:17, 6 October 2012

Translatewiki automaticaly redirects me to https after I log in through http. Yes, I found out right now that I can change https: to http: after login and am still normally logged in. So this should solve problem... but not entirely.

Browser is not stupid. I tested behaviour of some browsers in this case:

  • Internet Explorer 8 displays warning message (that you can't disable): you can choose if you want to load http requests or not.
  • Firefox 15.0.1 displays warning message (if you haven't disabled it yet) that it will load http requests regardless of what you want.
  • Opera 12.02 silently loads http content after few seconds (you can see that word "Secure" (in front of URL) changes to "Web" after a while).

So, Internet Explorer 8 is the only one that respects secure connection completely... at least in this case.

Domen (talk)13:35, 6 October 2012

Gah, I believe forceful https redirection after login is a bug in MediaWiki.

Nike (talk)06:50, 7 October 2012