Free HTTPS support for Github Pages with Kloudsec

Free HTTPS support for Github Pages with Kloudsec

How to get free https for your Github Pages using the Kloudsec service

Web Development, Cybersecurity
April 8th, 2016 · 2 min read
Free HTTPS support for Github Pages with Kloudsec

UPDATE: Kloudsec shut down last August 1. Too bad the service was good, way too good to survive. I’ll be checking out Let’s Encrypt in the near future.

If you are using Github Pages for your site similar to what I have here at gianfaye.com, you may want to grab this neat tool by Kloudsec. As some of us may know, Github does not currently support HTTPS on Github Pages with custom domains. UPDATE: They do now. Details here: Custom domains on GitHub Pages gain support for HTTPS

Kloudsec is an open Content Delivery Network (CDN) platform for programmers. They have servers at Singapore, US, and London, and are planning to expand to several locations. For the non-techies, visitors on your site will access the nearest server to them, serving your site faster as compared to just being served from one location.

Kloudsec for Github Pages provides HTTPS support for your Github custom domain page with a LetsEncrypt certificate over TLS 1.2, and a CDN for free. I received an email from Steven Goh, their CEO, about this tool. I’m not sure how they got my email address and knew that I have a custom domain for my Github Page but I think there are others who also got this email. I’m pretty sure they’re spreading the news out to everyone, I’m also doing my part as they religiously replied to my emails for my questions.

The process was swift, and I got all the configuration set up in just a few minutes and the site live with HTTPS in a few days.

Pics or it didn’t happen

Kloudsec email

Kloudsec dashboard overview

Kloudsec dashboard reliability

My site's certificate

Take Note:

  1. You should remove your old A records.
  2. You should wait for 48-72 hours for the propagation.
  3. You may redirect all your http traffic to your new https domain. How awesome is that?
  4. If you are using Disqus (or other commenting system) for your site, make sure to update the URL with the https - both on Disqus admin and your code.
  5. If you turned the redirect on, make sure all your resources are also loaded via https to prevent the Mixed Content warning on Google Chrome, or its counterpart on other browsers.
  6. When your site is offline, they will serve a cached copy of your site to your visitors.
  7. Enjoy your site being served over https.

Here’s my site report from Qualys SSL Labs:

My site's Qualys SSL report

Yay, an A+! Your turn.

Check out:
  • Encrypt All the Things - a movement to encourage all online users: companies, organizations, individuals, to follow strict precautions and best practices for securing their data and transactions.
  • Marking HTTP As Non-Secure - a proposal by the Chrome Security to mark sites served over http as not secure

There's more to read!

learningInternet of Things, Maker Culture

Arduino: Getting Started

•  2 min read

Philippine Online Banking Vulnerabilities (2015 Edition)

•  5 min read
Everything Else.
WebsitesLanding PagesPrintSoftware
Link to $https://github.com/gianfayeLink to $https://www.linkedin.com/gianfaye/Link to $https://twitter.com/gianfayeLink to $https://stackexchange.com/users/2642726/gian-faye?tab=accountsLink to $mailto:contact@gianfaye.com

© 2022 Gian Faye Paguirigan

PrivacyTerms of UseRSS