Consensus on SSL - what's everyone using?

rubyonrails-talk
1

Hi -

I need to use SSL in certain areas of my app. I have read about ssl_required via the 'book' and online:

It looks like what I need and want. However, I read that it may have issues with Nginx and that it may have loopholes in regards to securing requests from client to server.

http://blog.aisleten.com/2008/06/02/beware-of-ssl_requirement/ I'm not certain of the validity of this or whether its been addressed.

So I'm curious - what's everyone using for SSL?

Any help/tips greatly appreciated.

Thanks!

2

On my production server I proxy ssl through apache. On Bluehost I believe I will be doing the same thing.