Ruby on Rails Connection Security Cheatsheet

When securing a rails application it is essential to enforce connection security.

Its is done with simple configuration in rails by enabling TLS and forcing it:

  # config/environments/production.rb
  # Force all access to the app over SSL, use Strict-Transport-Security, and use secure cookies
  config.force_ssl = true

Uncomment the line 3 as above in your configuration for production.