Eight lessons learned hacking on GitHub Pages for six months

This post details the migration of GitHub Pages to their own `github.io` domain to mitigate cross-domain cookie security risks and phishing vulnerabilities. It explains the technical details of cookie tossing attacks and how browsers send cookies. The post also covers the use of public APIs for Pages infrastructure, the importance of user-initiated breaking changes, descriptive error messages, and optimizing for ideal use cases.