Orange actually reported this bug to urllib. The ticket in the HN link is actually a DUP of Orange's original finding