[wp-trac] [WordPress Trac] #52783: Health Check mis-reports https functionality in certain situations
WordPress Trac
noreply at wordpress.org
Fri Apr 9 00:30:03 UTC 2021
#52783: Health Check mis-reports https functionality in certain situations
-------------------------------------------------+-------------------------
Reporter: Ipstenu | Owner:
| peterwilsoncc
Type: defect (bug) | Status: reopened
Priority: normal | Milestone: 5.7.1
Component: Site Health | Version: 5.7
Severity: normal | Resolution:
Keywords: has-patch has-unit-tests commit | Focuses:
fixed-major |
-------------------------------------------------+-------------------------
Comment (by Ipstenu):
> That comment to me still reads mostly as focused on the scenario where a
site already has HTTPS. In that case, now the check that was causing
problems has been removed.
No, it wasn't.
If a site has https, the warning is unneeded, obviously. If the site does
not have https, the odds of them getting to wp-admin's health check
_without_ their browser yelling at them about security, is so high, it
puts into question the efficacy of us saying "Hey, this is bad."
Coupled with the reality that we know it's throwing false-positives, and
we lack any proper documentation on what it means, it seems fair to have
it be a warning "Hey, your site doesn't appear to have HTTPS working. if
you meant to do that, cool. if not, you should know..."
Is it severe? Yes. But is it a severe _WordPress_ issue? Well that's a
different question and it depends.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/52783#comment:45>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list