[wp-trac] [WordPress Trac] #62132: Make wordpress.org API connections for updates, plugins and themes configurable to a different location

[WordPress Trac]

#62132: Make wordpress.org API connections for updates, plugins and themes
configurable to a different location
-----------------------------+------------------------------
 Reporter:  jamesking56      |       Owner:  (none)
     Type:  feature request  |      Status:  new
 Priority:  normal           |   Milestone:  Awaiting Review
Component:  Upgrade/Install  |     Version:
 Severity:  normal           |  Resolution:
 Keywords:                   |     Focuses:
-----------------------------+------------------------------

Comment (by desmith):

 Need an opinion on something tangential to this, and which could have
 somewhat more dramatic side effects than "just" replacing a hostname.

 I'm working on a patch that would replace most references to
 `api.wordpress.org` with a call to a filter-able function, but while
 looking for hard-coded references to the hostname, I noted that many of
 them still make requests to `http://` and not to `https://`. The code is
 simpler if we make this setting/filter be the whole base URL (i.e.
 `https://api.wordpress.org` and not just the domain name
 `api.wordpress.org`), but that has the implicit side effect of making all
 the API requests that currently use http, now use https.

 All the tests I've done so far, seem to imply that on `api.wordpress.org`,
 http is unconditionally redirected to https anyway, but one person doing
 tests (who doesn't even know how the API works all that well) is far from
 conclusive.

 Who would be the best people/teams to ask about the server-side behavior
 for the API, to confirm whether the redirect is actually unconditional? If
 literally everyone is being redirected from 80 to 443 anyway, this could
 actually net a slight reduction in the load on .org (in addition to making
 it a configurable setting).

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/62132#comment:10>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform