https://stenci.la/ generates certificate error in browsers
Closed this issue · 7 comments
As reported by @kayakr over in stencila/stencila#649
Having moved to using Githup Pages for hosting http://stenci.la, HTTPS no longer works because Github Pages does not (quite) yet support HTTPS on custom domains. There are workarounds but it seems that Github is very close to enabling HTTPS support for custom domains: isaacs/github#156 (comment)
I asked Github support if they could switch us over to HTTPS. They responded:
As you've discovered, some GitHub Pages sites have been issued SSL certificates from Let's Encrypt, enabling HTTPS for your custom domain. This isn't officially supported yet and it's not possible for you to enable and enforce it on your other sites at this time.
We know how important secure browsing is for our users, but we don't yet have anything official to announce at this time. If and when this feature is officially released, we will announce it on our blog: https://github.com/blog
So, it we should probably find a workaround (e.g. a reverse proxy), rather than wait around for them to sort it out.
Hah, that's funny! Two days ago it was "if and when this feature is officially released".
Thanks for the heads up, appreciated. Will configure it later today.
Done.
Timing was indeed funny. Thanks nokome.
@nokome Not really worth a new issue, but still: What about enbling redirect from http://stenci.la/ to https://stenci.la/ ? It's just a checkbox in the GitHub settings:
