When are they going to sort this out?

https://i.redd.it/y162i630zosd1.png

16 Comments

  1. Tax dollars not at work; I search for the local weather radar on google, I click the link and immediately get this page, which then just directs to the main page.

    Feels like it’s been like this for years now

  2. Iirc it’s because some people who rely on (farmers) it have devices that doesn’t support https, since this site does not handle any sensitive (emails, passwords or location information) it isn’t a problem, as soon as you go to a page where there might be sensitive information like the “students or teachers” tab or “data requests and enquires”, it’s https

    Edit: https://reg.bom.gov.au is https also https://beta.bom.gov.au

  3. Ok-Battle5059 on

    I went into a deep dive into weather data because I was wanting to build a desktop background with weather data.

    BOMs api is insecure unless you are a corporate entity and have to pay a stupid amount for it.

    Willy weather uses bom data, has much better graphics imo and has a very cheap API.

  4. Not any time soon, there’s a lot of farm equipment that relies on HTTP, and there’s no practical benefit upgrading to HTTPS for bom.

    However I do agree that it defaulting to HTTPS when googling is annoying, I think that’s the fault of Google for prioritising HTTPS versions of sites though.

  5. Roulette-Adventures on

    I asked the same question 12 months ago.

    The truth is there are older apps out there which access BOM and do not have support HTTPS. By forcing these old apps, which may no even be updated anymore, to use HTTPS would likely break them.

    Whilst HTTP is port 80, HTTPS is 443 and the old shit from 20 years ago would struggle switching. From a and old programmers point of view port 443 is a whole new ball game with encryption etc.

    It’s about backward compatibility. If BOM changed and all the old stuff stopped working then people would be pissed off.

  6. strokethecringeywall on

    You can use https://reg.bom.gov.au/ to serve the current site over https.

    I have no idea why they don’t redirect to this instead of the error page, but I’ve just got it as a favourite now and it’s perfect.