You're right. Holes in basic SSL stuff, custom domain or otherwise, leading to insecure defaults are "not enough". People need to really start demanding more f

You're right. Holes in basic SSL stuff, custom domain or otherwise, leading to insecure defaults are "not enough". People need to really start demanding more from their hosting providers. Then again, this is the Heroku that sent Rap Genius on a months long troubleshooting spree and tens of thousands in expense due to poor documentation, so perhaps I should just mentally file them in the same bucket as Godaddy and be done with it.