Rack::SSL Force SSL/TLS in your app. Redirects all "http" requests to "https" Set Strict-Transport-Security header Flag all cookies as "secure" Installation gem install rack-ssl Usage require 'rack/ssl' use Rack::SSL