You could also suggest using a free service like: http://wwwizer.com/naked-domain-redirect http://wwwizer.com/naked-domain-redirect It'll 302 redirect naked d

You could also suggest using a free service like: http://wwwizer.com/naked-domain-redirect http://wwwizer.com/naked-domain-redirect It'll 302 redirect naked domains to www.domain, which will resolve to whatever you've configured it for. This should let you chain A -> 302 redirect -> CNAME and bypass the GitHub DDoS protection.