All geek questions in one place

Subdomain for SSL on Heroku

Why is it recommended to use an SSL certificate for secure.mydomain.com, and not www.mydomain.com for use on Heroku? I read this sentence on several blogs, but the authors did not specify. It seems that using secure.mydomain.com requires some redirection when switching between SSL and non-SSL requests and can create session difficulties.

+3
source share
2 answers

The limitation is that you cannot have your SSL based on the host name in the root domain (mydomain.com); It must be located on a subdomain (for example, www.mydomain.com, secure.mydomain.com). This is due to how the DNS system works:

SSL , CNAME . CNAME aliasing RFC.

, , . , : http://www.google.com/search?&q=ssl+on+subdomain+rails

SSL IP- , $100/.

+4

heroku.com. .

. http://docs.heroku.com/ssl

+1

Source: https://habr.com/ru/post/1779812/

More articles:


All Articles