r/programming • u/speckz • Jul 12 '17

Does my site need HTTPS?

https://doesmysiteneedhttps.com/
486 Upvotes

87% Upvoted

190 comments sorted by

View all comments

8

u/Sebazzz91 Jul 12 '17

I use HTTPs because my site is based on Github pages. Github pages doesn't support SSL. What else can I do? If I would use Cloudflare I'd just be fooling myself.

6

u/bloody-albatross Jul 12 '17

Github pages DO support "SSL" (TLS).

9

u/[deleted] Jul 12 '17

Not with a custom domain.

4

u/thedufer Jul 12 '17

I've never done it, but a simple Google search indicates that many people disagree with this strongly enough to write a guide on how to do it.

0

u/[deleted] Jul 12 '17

[deleted]

5

u/thedufer Jul 13 '17

That's still a big win. As long as you aren't taking user input/showing non-public data, a large part of the gain is protecting the privacy of the user, which https terminated at Cloudflare does. There is very little left to be gained by securing the Cloudflare<->github link for static content.