from Hacker News

Australia's Weather Bureau is retiring its HTTPS site, will keep using HTTP

by roxgib on 2/23/23, 5:05 AM with 4 comments

• by roxgib on 2/23/23, 5:05 AM

  The S is not a typo. It's retiring its HTTPS site. The old HTTP site (and the app) is staying.

  You can actually get the old site via HTTPS, but only on the https://reg.bom.gov.au subdomain. So there's that.

• by ggm on 2/23/23, 5:52 AM

  A truly weird decision, perverse-outcome sounding, if you don't explain it. Maybe the burden of holding state for TLS turned out to be too much for their capital investment, and they decided that there was no transitive risk in being insecure HTTP protocol, for a public information service.

  Or maybe something else?

  An explanation might help. I am sure future 'scrape the web and report on HTTP/HTTPS' bots are going to flag this as insecure.

• by bradwood on 2/23/23, 8:11 AM

  FFS. We're not living in the 90s anymore. Spent a few hours configuring LetEncypt and move the fuck on. If they are incapable or unwilling to do this in this day and age I'd have to wonder about how they can be trusted to engineer any other part of their system reliably.