5 ms·
How would Github "enable" HTTPS for custom domains? Do you want them to provide you with a free certificate for every custom domain you add? On the other hand,
by xrisk 10y ago
How would Github "enable" HTTPS for custom domains? Do you want them to provide you with a free certificate for every custom domain you add?
On the other hand, if you _do_ possess a cert for your custom domain, then HTTPS works just fine [1].
[1]: https://rishav.js.org https://rishav.js.org
- StavrosK 10y ago> Do you want them to provide you with a free certificate for every custom domain you add? Yes.
- strcat 10y agoSo you're using Cloudflare. Do you have Strict SSL enabled? If not, you don't have authenticated encryption. Hiding the problem is not a solution. If GitHub doesn't let you set a custom certificate, Cloudflare isn't a solution because they don't have a way to pin a certificate rather than relying on CA authentication.
- xrisk 10y agoYes, I believe you can enforce HTTPS using Cloudflare. I don't know about it because I don't manage the domain, I simply use the subdomain.
- detaro 10y ago> Do you want them to provide you with a free certificate for every custom domain you add? Various competitors have started doing that after Let's Encrypt was created, so yes?