Hacker News Reader

It does not have a valid certificate just like any other custom domain hosted on GitHub Pages.

Then you shouldn't consider either GH pages for hosting a security-oriented project or a custom domain redirect.