Facepalm. That’s all I can say.

The local authority declined to provide an answer on how the original advice to disable HTTPS was approved internally.