You [and the school] should consider putting such servers behind a secure proxy.
curl -Ii4 library.hkmlcps.edu.hk
HTTP/1.1 302 Found
Cache-Control: private
Content-Length: 138
Content-Type: text/html; charset=utf-8
Location: /Pages/Index.aspx
Server: Microsoft-IIS/8.0
X-AspNet-Version: 2.0.50727
Set-Cookie: ASP.NET_SessionId=aug5ggvxmo4u3euqyffkv1m5; path=/; HttpOnly
X-Powered-By: ASP.NET
Date: Tue, 17 Oct 2023 04:07:25 GMT