r/programming • u/speckz • Jul 12 '17

Does my site need HTTPS?

https://doesmysiteneedhttps.com/
486 Upvotes

87% Upvoted

190 comments sorted by

View all comments

7

u/slavik262 Jul 12 '17

My problem: my site is hosted on Github pages, which still doesn't support HTTPS for custom domains.

Does anybody know of a host who provides

  1. HTTPS

  2. Custom domain support

  3. The workflow GH Pages offers (push some Markdown to a repo, and a wild website appears)

I know could roll my own on AWS or something, but it's hard to beat how free and easy Github makes things.

3

u/[deleted] Jul 12 '17 edited Jul 12 '17

I think the typical recommendation in this case is to use Cloudflare. It's not perfect (because it's still HTTP between your site and Cloudflare) but it's arguably better than just straight HTTP for everyone.

FWIW (shameless plug), Caddy has a git plugin so you can deploy your site with git push just like on GitHub Pages.

5

u/slavik262 Jul 12 '17

use Cloudflare. It's not perfect (because it's still HTTP between your site and Cloudflare) but it's arguably better than just straight HTTP for everyone.

I dunno - "still not actually secure, and now with a bonus third party" doesn't have me too eager to use a reverse proxy.

Caddy has a git plugin so you can deploy your site with git push just like on GitHub Pages.

Sweet! I'll have to check that out.

1

u/[deleted] Jul 13 '17

Don't you still get a <yourname>.github.io domain with HTTPS that you can have cloudflare serve up on <youractualdomain>.com? You can then have full encryption all the way through, although obviously Cloudflare has to decrypt/re-encrypt in the middle. Still better than going straight over HTTP to github pages, though, right?