Hacker News Reader

If you're serving them over plaintext http, then they're already insecure. How dangerous that is might be debatable, but there's no doubt that it's insecure.

Well China intercepts http traffic and inserts javascript malware joining users into a botnet that DDOSes github pages of human rights organizations. It depends on what you mean by insecure and dangerous.

Link?

https://citizenlab.org/2015/04/chinas-great-cannon/

https://en.wikipedia.org/wiki/Great_Cannon

gitlab pages has https support built in

For custom domains? I doubt it. Op is not talking about https://<username>.github.io.

Comment you're responding to said gitlab, not github.

Maybe those code hosting sites need to become more creative in their naming...

The comment I was responding to was talking about gitlab having SSL on their <username>.gitlab.io pages. While correct, that is besides the point OP was making. Which was about custom domains. Gitlab doesn't offer that, either.