232ab2d209
I had to scrap the 1.4.2-beta.8 release because meteor-tool@1.4.2-beta.8 got published by a partial run of the publish-release script, but then the publish-release script thought meteor-tool changed after that, and I didn't want to republish it as something like 1.4.2-1-beta.8.
force-ssl
Source code of released version | Source code of development version
This package, part of Webapp, causes Meteor to redirect insecure connections (HTTP) to a secure URL (HTTPS). Use this package to ensure that communication to the server is always encrypted to protect users from active spoofing attacks.
To simplify development, unencrypted connections from localhost are
always accepted over HTTP.
Application bundles (meteor bundle) do not include an HTTPS server or
certificate. A proxy server that terminates SSL in front of a Meteor
bundle must set the standard x-forwarded-proto header for the
force-ssl package to work.
Applications deployed to meteor.com subdomains with
meteor deploy are automatically served via HTTPS using Meteor's
certificate.