Hacker News Reader

CloudFlare supports HTTPS for GitHub Pages, would definitely recommend it as although Namecheap is pretty good CloudFlare make everything DNS, CDN and security related soo easy for $0. (I'm not affiliated with them in any way :P )

https://blog.cloudflare.com/secure-and-fast-github-pages-wit...

View on HN

The route from the user's browser to Cloudflare is encrypted (https), but the route between Cloudflare's servers and github pages is only http as Github does not support https for custom domains.

User <---https---> Cloudflare <---http---> Github pages

As long as your github page has https (it does) Cloudflare can do full HTTPS all the way through, and even strict to require a valid ssl cert (which github has).

Any tips on how to configure this? I'm pretty sure my setup has the problem that ploggingdev talked about.

I acknoledged the issue given, but considered it better that the content the user is accessing was hidden for their privacy - the link between Cloudflare and GitHub is backbone-of the internet stuff and has a whole different set of risks. Would be nice to plug it.

https://support.cloudflare.com/hc/en-us/articles/200170416-W...

I don't think this is correct for GitHub Page sites that use custom domains. See [1] and [2].

[1]: https://konklone.com/post/github-pages-now-supports-https-so...

[2]: https://github.com/isaacs/github/issues/156

Reply on news.ycombinator.com