4 ms·

At least they have enabled https... I am using to for a longer time and didnt know it was possible until now.

• JorgeGT 10y ago
  But not for custom domains, sadly.
  • PanMan 10y ago
    Those are easy to do with a (free) Cloudflare account
    • strcat 10y ago
      There's still the connection from Cloudflare to the origin server, which won't have authentication.
      • Ajedi32 10y ago
        Couldn't Cloudflare just connect over HTTPS using the regular github.io domain?
  • xrisk 10y ago
    How would Github "enable" HTTPS for custom domains? Do you want them to provide you with a free certificate for every custom domain you add? On the other hand, if you _do_ possess a cert for your custom domain, then HTTPS works just fine [1]. [1]: https://rishav.js.org https://rishav.js.org
    • StavrosK 10y ago
      > Do you want them to provide you with a free certificate for every custom domain you add? Yes.
    • strcat 10y ago
      So you're using Cloudflare. Do you have Strict SSL enabled? If not, you don't have authenticated encryption. Hiding the problem is not a solution. If GitHub doesn't let you set a custom certificate, Cloudflare isn't a solution because they don't have a way to pin a certificate rather than relying on CA authentication.
      • xrisk 10y ago
        Yes, I believe you can enforce HTTPS using Cloudflare. I don't know about it because I don't manage the domain, I simply use the subdomain.
    • detaro 10y ago
      > Do you want them to provide you with a free certificate for every custom domain you add? Various competitors have started doing that after Let's Encrypt was created, so yes?