[wp-trac] [WordPress Trac] #47577: Detect HTTPS support and provide guidance

[WordPress Trac]

#47577: Detect HTTPS support and provide guidance
--------------------------------------+-----------------------------
 Reporter:  flixos90                  |       Owner:  flixos90
     Type:  enhancement               |      Status:  assigned
 Priority:  normal                    |   Milestone:  5.7
Component:  Security                  |     Version:
 Severity:  normal                    |  Resolution:
 Keywords:  has-patch has-unit-tests  |     Focuses:  administration
--------------------------------------+-----------------------------

Comment (by Clorith):

 As @westonruter already did a great run-through of recommended
 improvements code-wise, I'll just comment on the Site Health
 implementation it self.

 I recall it was mentioned that having a way to reach the host would be
 convenient here, I believe this was brought up in the core chat while the
 ticket was discussed, and I think that might make sense. There's already a
 constant for PHP updates that hosts can make use of to direct users to
 their own documentation, and I think if HTTPS isn't available not all
 users know where to go /you'd be surprised how many don't actually know
 who their webhost is).

 Would it make sense to introduce a new method for hosts to provide the URL
 for their support system (hosts could then filter this how they like to
 either be generic, or tailored for each clients site, that's up to them,
 but we'll facilitate it). There are various scenarios where you'd want to
 involve a host for support, so this is a feature that could be re-used a
 fair bit, also by plugins or themes looking to make use of functionality
 that is unsupported, and they could then give their users an actionable
 path forward.

 The existing scenario supports an environment variable of
 `WP_DIRECT_UPDATE_PHP_URL`, having `WP_HOST_SUPPORT_URL` or similar (name
 not set in stone, just for discussion) might then be useful, with a helper
 function?

 Other than that, I think the Site Health implementation seems simple
 enough, I'm curious if this might be a great first step into introducing
 direct actions? This would mean having the action link, which currently
 takes you to the options page, perform the options update for you, it
 could then verify the page still loads as expected wit ha loopback (I do
 love those loopbacks), and revert and direct users to host support if it
 fails, as that would indicate something is wrong 🤔

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/47577#comment:25>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform