I noticed, that since quite some time GitHub pages set the CORS header access-control-allow-origin: *, which means it should work quite well to host static information about a space.
curl -i -L rnestler.github.io 2>&1 |grep access-control
access-control-allow-origin: *