Hacker News Reader

403/404 seems to be the response to GET, not POST. In which case 405 Method Not Allowed would be better.

And 405 response must include `Allow: POST` header.

Oh, I misread. Indeed, 4xx makes sense for a GET.