Does Github Pages support HSTS TLDs for custom domains?

[nuxy]

Select Topic Area

Question

Body

I'm trying to use .dev TLD for my Github project pages, and while Github successfully verifies the domain name, the corresponding Github page returns a web browser initiated HSTS error message. I have not been able to find anything documented regarding this HSTS-required domain names.

A definitive answer from Microsoft would be helpful in this regard, or update to the Pages documentation that clarifies HSTS support.

[yoannchaudet]

I am not aware of us not supporting HSTS TLDs (like .dev). If you share your domain name, we can look up what may be preventing the cert obtention.

[Tgentil]

Yes, GitHub Pages supports custom domains, including those requiring HSTS like .dev domains. When you configure a custom domain on GitHub Pages, you can enforce HTTPS, which is essential for HSTS compliance. It's important to correctly set up DNS records with your DNS provider for this purpose.

For detailed guidance on setting up your custom domain and enforcing HTTPS on GitHub Pages, you might find these GitHub Docs helpful:

• Managing a custom domain for your GitHub Pages site
• Securing your GitHub Pages site with HTTPS

I also found this blog very helpful:

• Connecting a .DEV Domain to Github Pages with HTTPS

[nuxy]

This seems to be related to an issue on my part when Github Pages was set-up in conjuction with verifying custom domains, and quite possibly DNS record caching. After falling back to using only the CNAME the page can now be accessed successfully.

[RyanCavanaugh]

@Tgentil 's answer above is incomplete. GitHub Pages supports HTTPS, and will send HSTS for domains that require it, e.g. .dev. However, there is currently not a way to enable HSTS for domains which don't require HSTS, e.g. .com or .org.