Consensus on SSL - what's everyone using?

Hi -

I need to use SSL in certain areas of my app. I have read about
ssl_required via the 'book' and online:

It looks like what I need and want. However, I read that it may have
issues with Nginx and that it may have loopholes in regards to
securing requests from client to server.
I'm not certain of the validity of this or whether its been addressed.

So I'm curious - what's everyone using for SSL?

Any help/tips greatly appreciated.


On my production server I proxy ssl through apache. On Bluehost I
believe I will be doing the same thing.