News for hackers. Stuff that matters.

A comment on NeverSSL. Parent comment

Re:NeverSSL by hn_throwaway_99 on Saturday November 02, 2019 @07:19PM (#21430809)
I'm pretty sure GitHub would require SSL, no?
[ Parent | on HN ]
Re:NeverSSL by morpheuskafka on Saturday November 02, 2019 @10:13PM (#21431588)
Not on a custom domain--it's optional, and you have to have a CAA policy that will allow them to get an SSL cert for your domain and agree to allow them to do so. It's only required for github.io subdomains.
[ Parent | on HN ]
Re:NeverSSL by rumblefrog on Saturday November 02, 2019 @07:35PM (#21430880)
There's an option to enforce it.
[ Parent | on HN ]