Need exclusion: Wikimedia donation URL

[timmc]

This is improperly targeted for HTTPS-ification:

https://links.email.donate.wikimedia.org/

I assume this is the file that needs to be changed, although I don't have the time to do it right now:

https://github.com/EFForg/https-everywhere/blob/master/src/chrome/content/rules/Wikimedia.xml

[reedy]

Where did you get this url from?

"This server could not prove that it is links.email.donate.wikimedia.org; its security certificate is from *.links.mkt41.net. This may be caused by a misconfiguration or an attacker intercepting your connection."

Actually browsing it, and accepting the bad cert suggests it's something most users shouldn't see...

[timmc]

Wikimedia sent me an email asking me to donate like I did last year:

http://links.email.donate.wikimedia.org/ctt?kn=X&ms=XXXXXXXXXXXXX&r=XXXXXXXXXXXXXXXXX&b=X&j=XXXXXXXXXXXXX&mt=X&rt=X

I browsed to it and HTTPS Everywhere sent it to https, which then broke the page. I had to disable the rule and edit the URL, then proceed to the donation page it linked to:

https://donate.wikimedia.org/wiki/Sep2014enUS_noquote

...which was already linked as HTTPS and works fine. I agree that they should have working HTTPS for that links domain, but they don't at the moment, and they link to it as HTTP.

[reedy]

I'll poke the fundraising team about this and get something filed in the Wikimedia bug tracker and see what we can do from our (Wikimedias) side

[timmc]

That would work too! :-)

[nemobis]

Turns out it was already filed. https://bugzilla.wikimedia.org/show_bug.cgi?id=58373#c7 said:

Our current position is that individuals using something like SSL Everywhere are an edgecase; and that a unsubscribe page that works consistently is currently better than one that doesn't work at all.

Ugh. I filed the HTTPS issue separately at https://bugzilla.wikimedia.org/show_bug.cgi?id=72514