Not essential as static site not very vulnerable, but would probably still be worth putting onto secure https at some point. Currently github doesn't natively support (long discussion thread here), but there is a free workaround using cloudfare if anybody wants to try and implement.