Hacker News Reader

Why wouldn't you at least just reverse proxy the popular pages or hell, put them on S3 or something? The ones checked by the general public, at least, could be statically generated and stored in s3 with a simple schedule!

This is incorrect. They already have an HTTPS server that supports TLS 1.2, it's just being used to redirect to their HTTP server.

This is verifiable by typing `curl -v https://www.bom.gov.au/` in your terminal.

It's not the same server.

A "curl --head https://www.bom.gov.au/" answers with "Server: AkamaiGHost", while "curl --head http://www.bom.gov.au/" answers with "Server: Apache".

That does not seem to be the issue as others have commented.

In large organisations technical issues are often not the blocker. Process, approval chain, etc. often are.

Probably an even more mundane reason: they have personnel available to create the redirection and HTTP error page, but not to do the proper migration to HTTPS.