JRuby Certificate is invalid

[astrieanna]

The https connection to JRuby.org appears as insecure because the certificate is invalid.

It looks like it's using a cert for github.com, but the site is jruby.org.

[sfgeorge]

⏫ Agreed, this is important.

1. The https://jruby.github.io uses a valid cert for *.gihub.io 👍 But https://jruby.org needs an SSL cert for jruby.org.
2. https://jruby.github.io redirects to http://jruby.org . It should redirect to https://jruby.org (once 1. is fixed)
3. All http://jruby.org/ requests should redirect to https://jruby.org (once 1. is fixed)

[sfgeorge]

According to the GitHub Blog Post, Custom domains on GitHub Pages gain support for HTTPS:

If you are using CNAME or ALIAS records for your custom domain, you’re all set and your site should be accessible over HTTPS.

jruby.org doesn't currently use MX records, in which case either of the above options are good. But if we want to leave mail functionality open as a possibility, then I'd suggest against using CNAME.

CNAME would break mail functionality for a domain. as suggested here on S.O., a good approach is to use A, ALIAS or ANAME - but not a CNAME.

GitHub Help: Setting up an apex domain

[headius]

Thanks for the tips, folks. We fixed this a couple months ago.