Module 4 — Enforce HTTPS and prevent domain takeovers
Course: GHP-DOM-101 · Estimated study time: 40–55 minutes · Module 4 of 7
Measurable learning outcomes
By the end of this module, the learner should be able to:
- Validate HTTPS redirect and hostname coverage after certificate issuance.
- Identify dangling DNS records and unclaimed Pages domains as takeover risks.
- Demonstrate that secrets and private learner records do not belong in static build output.
Practical deliverable: Design a domain security review checklist for your simulated deployment. Record certificate status, mixed-content checks, external script approvals, publishing permissions and what happens when the site is retired.
Protected learning content
GitHub Pages Setup
Confirming your learner account and course enrolment.