f-i-f-t-h--> DomainMapping, which we made beta in the last release, and which lets you back your custom domain names with Knative Services now has TLS support (both automatic and bring-your-own). Also it's now in the v1beta1 api group, but v1alpha1 will still work for ~ages.