Hacker News Reader

There are workarounds for this, but as I understand it GitHub won't validate an SSL cert for a custom domain.

I found this tutorial [1] very helpful when setting up my own site [2] (which you can see is HTTPS and served by GitHub Pages [3]).

[1] https://www.jonathan-petitcolas.com/2017/01/13/using-https-w...

[2] https://oisinmoran.com/

[3] https://github.com/OisinMoran/OisinMoran.github.io

tl;dr: content on GitHub Pages, fronted by CloudFlare with SSL

Takes the traffic burden off Pages.

Also:

> Using flexible SSL, all communications between CloudFlare servers and GitHub ones are not encrypted. Not really secured, even if your domain would be served in HTTPs. [1]

[1]: https://www.jonathan-petitcolas.com/2017/01/13/using-https-w...

I've done that by putting Cloudflare in front, as discussed here: https://blog.cloudflare.com/secure-and-fast-github-pages-wit...

The domain resolves to IPs in AWS. If they’re using Pages, there’s a caching layer with TLS.

Certificate is issued by cloudflare