4 ms·

I'm probably misreading you somehow -- if your site is hosted by Github isn't it already HTTPS?

• Santosh83 9y ago
  It is, unless you want to use a custom domain with it. With the latter case your only choice to retain some semblance of HTTPS is to put it behind a CDN, but that still breaks end-to-end HTTPS. The problem really has to solved at Github's end, by allowing users to upload their own certs.
  • teraflop 9y ago
    Wait, how is serving your content through Github's servers using your own certificate any more secure than letting GitHub or CloudFlare provide the cert?
    • IanCal 9y ago
      It's arguably more secure than letting cloudflare do it (adding a new party doesn't make the chain more secure) but it doesn't have to be more secure than using githubs cert. It's just that you can't use githubs cert with your own custom domain.
  • agrajag 9y ago
    You can set your own cert on the CDN though, and have the CDN request origin objects over https from the github domain. Since the CDN is the endpoint for your domain, you'll still be presenting a custom domain to your users.
    • icebraining 9y ago
      Which CDNs support that kind of domain translation?