Wrong cert is being served for https.

[itsjohncs]

Emily reported that when you go to https://engineering.khanacademy.org your browser warns you that things are awry. The cert it's pulling down is GitHub's, we'll want to instead point it at our Khan Academy one.

[itsjohncs]

If the blog post at https://konklone.com/post/github-pages-now-sorta-supports-https-so-use-it is to be trusted, we're going to have to put CloudFlare on top of pages if we want to fix this problem :'(.

[sophiebits]

Sounds accurate to me. Fastly can probably also do it; their config options are more flexible (at least for the plan we have).

[itsjohncs]

Oh cool, I didn't realize we were using Fastly. I'll log into it in a bit and see if I can set it up. Thanks @spicyj!!

[itsjohncs]

We're on Fastly's free plan, so it looks like we won't be able to use SSL with them unless we jump onto one of their subdomains. I think CloudFlare will let us set up our own domain for free though (the cert will be one of CloudFlare's, but that doesn't seem like an issue).

[itsjohncs]

Doh, CloudFlare won't allow this either... This doesn't look possible to do without paying :(.