The Bureau of Meteorology website does not support connections via HTTPS
1–10 of 58 posts
Re: The Bureau of Meteorology website does not support connections via HTTPS
#2Welcome to Australia.
This has been an issue for years, and I don't know why.
Re: The Bureau of Meteorology website does not support connections via HTTPS
#3I personally know someone working at BOM. His endless ranting about how the place is run is hilarious.
Re: The Bureau of Meteorology website does not support connections via HTTPS
#4I wonder if you could mitm an HSTS header.. short term dick move but might raise enough of a stink for it to be fixed..? I can only dream.
Re: The Bureau of Meteorology website does not support connections via HTTPS
#5What practical difference does it make if I connect to an Australian weather forecast site via HTTP or HTTPS? Is the NZ secret police gonna MITM a rain forecast my way when it's actually gonna be a very sunny day?
Re: The Bureau of Meteorology website does not support connections via HTTPS
#6Welcome to Australia. This has been an issue for years, and I don't know why.
The rationale, such as it is, is that BoM serves current and historic weather parameters for various parts of Australia and hasn't seen any need to ensure that be delivered in a secure manner to individual web users.
There might be some hypothetical scenario from faking weather data and injecting it to fool the casual user but that seemingly hasn't come up in practice and so they don't fuss about it.
On the flip side, for those interested in RAW downloads from MODIS and other sats relevant to the weather, to ground station raw data transfers, to modelled predictions under various assumptions for commercial | military | government use etc ... BOM has secure login and bulk data transfer protocols, and has had those for at least 30+ years (morphing with time).
Re: The Bureau of Meteorology website does not support connections via HTTPS
#7What practical difference does it make if I connect to an Australian weather forecast site via HTTP or HTTPS? Is the NZ secret police gonna MITM a rain forecast my way when it's actually gonna be a very sunny day?
It's just dangerous because any party on the way between wifi and the server can edit the content
See: why are free proxies free https://blog.haschek.at/2013/05/why-free-proxies-are-free-js...
Re: The Bureau of Meteorology website does not support connections via HTTPS
#8Assuming this has come from Tall Paul Tech’s latest video?
Re: The Bureau of Meteorology website does not support connections via HTTPS
#9What practical difference does it make if I connect to an Australian weather forecast site via HTTP or HTTPS? Is the NZ secret police gonna MITM a rain forecast my way when it's actually gonna be a very sunny day?
Nah, the NZ secret police is too busy removing NZ from maps so no one can find us.
Re: The Bureau of Meteorology website does not support connections via HTTPS
#10What practical difference does it make if I connect to an Australian weather forecast site via HTTP or HTTPS? Is the NZ secret police gonna MITM a rain forecast my way when it's actually gonna be a very sunny day?
Aside from browsing history, privacy implications, some ISPs insert adverts, into the HTML - possibly opening up the user, to drive by browser exploits…
The reality is, it’s not complicated to add HTTPS, as a feature, so there’s no good reason as to why it’s not implemented - aside from incompetence, or trying to save money, on staff?!