Do we use Apache or nginx? If we're using Apache, we could set up an .htaccess to redirect users to https

RewriteEngine On

RewriteCond %{HTTPS} off

RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}

Maybe Infrastructure can even modify a setting to enable SSL everywhere.

+1 good idea

Anything new here? AFAICS all our new websites are already https, for others like fudcon.fpo and probably fcomm.org it is not worth to pay for a certificate when we are thinking to put them content-wise into our new hubs project.

I think the big thing that'd still be nice is for all wiki page access to be redirected to https. Right now if you hit http://fedoraproject.org/wiki/, you will be redirected, but any page (e.g. http://fedoraproject.org/wiki/Overview) will not.

This is also tracked at: https://fedorahosted.org/fedora-infrastructure/ticket/2888

Except for fedoracommunity.org (we will probably have another website once we'll have hubs ready) all websites maintained by the websites team are https.

The wiki is Infra related, there's not much we can do, and I see the discussion is going on in the ticket till linked. I'm closing this one, but feel free to reopen if needed.