[wp-trac] [WordPress Trac] #52783: Health Check mis-reports https functionality in certain situations

WordPress Trac noreply at wordpress.org
Fri Apr 9 00:30:03 UTC 2021


#52783: Health Check mis-reports https functionality in certain situations
-------------------------------------------------+-------------------------
 Reporter:  Ipstenu                              |       Owner:
                                                 |  peterwilsoncc
     Type:  defect (bug)                         |      Status:  reopened
 Priority:  normal                               |   Milestone:  5.7.1
Component:  Site Health                          |     Version:  5.7
 Severity:  normal                               |  Resolution:
 Keywords:  has-patch has-unit-tests commit      |     Focuses:
  fixed-major                                    |
-------------------------------------------------+-------------------------

Comment (by Ipstenu):

 > That comment to me still reads mostly as focused on the scenario where a
 site already has HTTPS. In that case, now the check that was causing
 problems has been removed.

 No, it wasn't.

 If a site has https, the warning is unneeded, obviously. If the site does
 not have https, the odds of them getting to wp-admin's health check
 _without_ their browser yelling at them about security, is so high, it
 puts into question the efficacy of us saying "Hey, this is bad."

 Coupled with the reality that we know it's throwing false-positives, and
 we lack any proper documentation on what it means, it seems fair to have
 it be a warning "Hey, your site doesn't appear to have HTTPS working. if
 you meant to do that, cool. if not, you should know..."

 Is it severe? Yes. But is it a severe _WordPress_ issue? Well that's a
 different question and it depends.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/52783#comment:45>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list