Hacker News Reader

HNHacker News

Top New Best Ask Show Jobs

Comment by beltex | Hacker News Reader

Parent Full thread

beltex·

> Add HTTPS support to Github Pages

This is technically already available, though not officially documented anywhere [1]. Example [2]

[1] https://github.com/isaacs/github/issues/156#issuecomment-377...

[2] https://beltex.github.io

View on HN

While that's true, I think the discussion in that issue has gone more towards HTTPS support for custom domains.

You could always use CloudFlare directly for that... I would presume that their underlying connection to Github is very close and reliable in terms of risk for MITM.

Even better, you could CNAME your custom domain into the *.github.io domain, which is protected by a wildcard https.

So you traffic between CloudFlare and GitHub will also be secured.

Last I checked, this doesn't actually work with the way *.github.io is set up.

I wonder if letsencrypt will allow that to become practical?

> While that's true, I think the discussion in that issue has gone more towards HTTPS support for custom domains.

A huge number of those "+1 for HTTPS on custom domains" don't seem to understand/appreciate the difference in providing HTTPS on the *.github.io (one wildcard cert) vs. HTTPS support for custom domains.

The latter would require an interface (UX being key here) and storage for uploading your own domain certificates to GitHub, which is nothing like any other part of GitHub right now. I also presume that most of these "+1's" would want this service to remain free.

Reply on news.ycombinator.com