I use Kloudsec CDN to get HTTPS on my static sites. It's very easy to set up and free (certificates are from Let's Encrypt). You can use it for custom domains on GitHub pages as well.

https://www.kloudsec.com/