I don't get it. Why doesn't GFW just block those github pages in particular? A lot of people can fork these repos but they won't be anywhere popular to the current pages.
I am sure they have a private key of some of the CAs shipped with major browsers lying around somewhere...