3 ms·
There are ways of doing that without sacrificing security. Making TLS a paid-only feature makes no more sense than making CSRF protection a paid-only feature.
by nsgi 10y ago
There are ways of doing that without sacrificing security. Making TLS a paid-only feature makes no more sense than making CSRF protection a paid-only feature.
- hamandcheese 10y agoOn Heroku, TLS is enabled if you use the *.herokuapp.com domain, even on free plans. So really they are charging you if you need a custom domain and security (i.e. Something most businesses do need and most hobbies don't). Seems a like a reasonable and fair way to segment their market to me.