[wp-trac] [WordPress Trac] #28443: SSL behind a load balancer

[WordPress Trac]

#28443: SSL behind a load balancer
--------------------------+-----------------------
 Reporter:  lracicot      |       Owner:
     Type:  defect (bug)  |      Status:  reopened
 Priority:  normal        |   Milestone:
Component:  Security      |     Version:  trunk
 Severity:  normal        |  Resolution:
 Keywords:                |     Focuses:
--------------------------+-----------------------

Comment (by nacin):

 WordPress.org itself runs on SSL behind a load balancer. Our environment
 is such that the application layer is passed information about the
 requesting client, not the load balancer's UA, IP, or protocol.

 The only thing we could consider is something like
 http://symfony.com/doc/current/components/http_foundation/trusting_proxies.html.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/28443#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform