Using www doesn't force SSL on every request in any way and there is no reason 
not to use it.  Forcing SSL on all requests has a lot of value these days and 
might be worth doing.  Sites like Facebook and Github have gone SSL only and it 
seems to work pretty well for them.  I agree that "secure" seems silly unless 
you are doing an ecommerce step or something similar and want the visual 
display of security.

Rob

On Oct 9, 2012, at 10:52 AM, Patrick Crowley <[email protected]> wrote:

> Hey, folks.
> 
> Is there any reason not to use "www.mydomain.com" as your SSL endpoint 
> hostname on Heroku? Or would that potentially mean all site traffic gets 
> routed through SSL?
> 
> The docs suggest "secure.mydomain.com", but I'd prefer something less 
> technical.
> 
> -- Patrick
> 
> -- 
> SD Ruby mailing list
> [email protected]
> http://groups.google.com/group/sdruby

-- 
SD Ruby mailing list
[email protected]
http://groups.google.com/group/sdruby

Reply via email to