On: TLS Everywhere, not https: URIs (2015)

[jefftk]

Serving different things on https and http is completely to spec, though. It's not really a server misbehaving.

(I do agree that it's contrary to expectations, but I'm sure this doesn't stop sites from relying on it.)