#Https

#356 Dangers of Session Hijacking - RailsCasts

Shows how a session cookie exposed over HTTP can be stolen and replayed, then explains Rails protections with force_ssl and a separate secure signed cookie for HTTPS requests.