Requests for Comment/Interwiki links editing

Interwiki links are links that allow wikis to link pages from other wikis. There is a global Miraheze interwiki which is the default for all wikis, as well as local interwikis for each wiki. Users are not allowed to edit their own interwiki, and this is due to the fact that interwiki can be used for phishing, spam and other malicious uses, since the links appear as any other wiki page.

Proposal 1
Create a new group called "interwiki-admin". This group will be able to edit local interwiki upon request, but not the global list which will remain restricted to Meta administrators. Interwiki admins may edit any interwiki where they are a bureaucrat, but naturally should not edit any other interwikis without a request from a bureaucrat there.

Interwiki admins are required to check every link before they add it to interwiki, to make sure it is not malicious.

Rights and Eligibility criteria

interwiki-admin is voted on by users. However, the following conditions must be met in order for the user to be eligible to be voted. If these conditions are not met, the user may not be a candidate for 'interwiki-admin' and any support votes will not matter. A candidate must:


 * Have at least 1000 total global edits on Miraheze (on more than one wiki) ( Note: These edits may not consist of directly copy/pasting content from other wikis, they must be edits done by the user )


 * Have had their Miraheze account for at least 2 months
 * Be involved in some way in community matters (in discussions on Community Noticeboard, etc.)

Revocation

If an interwiki-admin adds any malicious site to interwiki, they can immediately be revoked without warning.

Support

 * 1) as proposer. Reception123  (talk) ('C' ) 06:58, 23 July 2018 (UTC)
 * 2) Seems good to me.-- 10:18, 23 July 2018 (UTC)
 * 3) MacFan4000 (Talk Contribs) 15:20, 23 July 2018 (UTC)
 * 4) &#32;  Miraheze Logo.svg centrist16 | Talk | P mail.svg | Discord color D.svg  &#32; 18:43, 23 July 2018 (UTC)

Comments
Discussing privileges before policy is not a very solid approach. First, if the proposed target site is merely not “malicious”, then should an interwiki editor add it because a couple of wiki editors want it? Second, what namely does “malicious” mean? On July 23 wiki.example.net points to some site with innocuous static HTML pages. But the same hour the link is added to the interwiki table a baddie steals the password for DNS control panel for example.net (or even cracks the server ns.example.net). On July 24 we see wiki.example.net pointing to a site ridden with trojans. How should an interwiki editor guard against domains with poor security? Incnis Mrsi (talk) 08:48, 23 July 2018 (UTC)
 * Even if many users want it, for security reasons it should not be added by the interwiki admin. This is a definition for malicious, but what I mean in this case specifically is any site which contains anything that can do harm to a user's computer (such as spam, phishing attempts, anything like that). The latter example you give is something that no one can be aware of (even the Meta sysops and sysadmins currently managing interwiki). The latter example should be reported by users, and then the interwiki administrator can remove it, rather than having to wait for a Meta sysop or sysadmin (which could take more time). Reception123 (talk) ('C' ) 09:12, 23 July 2018 (UTC)
 * Ironically, this reply of the proposer—with a https: link to Wikipedia—casts a doubt on feasibility of the interwiki mechanism on Mirahese. Can this mess be managed at all if not every sysadmin is willing to use it even for the most popular sites? Perhaps this job should be more about watching the health of linked sites and removal of dubious records rather than adding scores of new records? Consequences of poor security of sites and domains can’t be predicted for each individual case—look, even [//commons.wikimedia.org/w/index.php?title=MediaWiki:Common.js&action=history&offset=201807 Wikimedia Commons was cracked not a long time ago]—but guards against unreliable domains would be helpful. First of all, rather than wait for users’ reports about each link to a dangerous site, a guideline should mandate that If the linked site is down for a considerable time, is parked, or the domain is manifestly put for sale, than the interwiki record is subject to removal. Incnis Mrsi (talk) 15:11, 23 July 2018 (UTC)

Responses to your questions: 1. There could be a new page for handling requests, and they would be handled by all users (including interwiki-admins) who have the right to change interwiki. 2. Yes, translating and wiki creation helps the community. 3. That is to be decided, but most likely a new page called "Requests for global rights". 4. Answered in 1. Reception123 (talk) ('C' ) 12:23, 23 July 2018 (UTC)
 * I agree with the draft, but have several questions.
 * Who will handle interwiki requests (and when will they be handled), before everything is settled? (Like the one I made on Stewards' noticeboard)
 * Are translation and wiki creation works included in your definition of "being involved in some way"?
 * And additionally, are translation works counted as edits (it's NOT a copy, but still, it's based on other contents in English)?
 * Where should a user make a request for interwiki-admin permission?
 * Where should an interwiki request be made after this user group is created? (ex. stewards' noticeboard, Phab, or create a new page specified to this kind of requests, etc.)
 * -- 10:18, 23 July 2018 (UTC)
 * I see. Thanks for your response.-- 12:32, 23 July 2018 (UTC)