meldium/breach-mitigation-rails — pull request #17 by eatstoomuchjam (2014-04-02 00:03:14+00:00)
Title: Properly detect https on proxied connections

When a load balancer (e.g. BigIP, nginx) is used to terminate SSL, the connections to the backend appservers within the local datacenter will be over http. They usually set a request header to indicate that the request was made over SSL and Rack knows several of the most common that are used. This switches to using the SSL detection built into a Rack request object instead of just using the Rack request scheme.

I looked into adding a test, but your existing specs seem to only cover the function to pad the request length. Please let me know if you'd prefer that add specs for the call function for you.