
GitHub Availability Report: October 2023
In October, we experienced two incidents that resulted in degraded performance across GitHub services.
Beginning today, all GitHub Pages sites are moving to a new, dedicated domain: github.io. This is a security measure aimed at removing potential vectors for cross domain attacks targeting the…
Beginning today, all GitHub Pages sites are moving to a new, dedicated
domain: github.io. This is a security measure aimed at removing potential
vectors for cross domain attacks targeting the main github.com session as well
as vectors for phishing attacks relying on the presence of the “github.com”
domain to build a false sense of trust in malicious websites.
If you’ve configured a custom domain for your Pages site (“yoursite.com”
instead of “yoursite.github.com”) then you are not affected by this change
and may stop reading now.
If your Pages site was previously served from a username.github.com domain,
all traffic will be redirected to the new username.github.io location
indefinitely, so you won’t have to change any links. For example, newmerator.github.com now redirects to newmerator.github.io.
From this point on, any website hosted under the github.com domain may be
assumed to be an official GitHub product or service.
Please contact support if you experience any issues due to these changes.
We’ve taken measures to prevent any serious breakage but this is a major change
and could have unexpected consequences. Do not hesitate to contact support for assistance.
Changes to Pages sites and custom domains:
Changes to GitHub repositories:
There are two broad categories of potential security vulnerabilities that led to
this change.
We have no evidence of an account being compromised due to either type of
vulnerability and have mitigated all known attack vectors.