<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#ffffff">
<br>
Hi,<br>
<br>
<blockquote
cite="mid:CAAvWcKHx-R+kvzb4hnjiPGt_Htvmj4PbuAadY6Ak1yZbZE5h0Q@mail.gmail.com"
type="cite">Running the whole site under https is a solution, but
they asked me to 'protect' only a couple of controllers. I am not
using a gem, I am using this in ApplicationController</blockquote>
<br>
Just be aware in that case your application would be vulnerable to
session stealing by intercepting your cookie (via firesheep, for
example) unless you are using the cookie only on the safe actions
and you mark it as secure only.<br>
<br>
<div class="moz-signature">-- <br>
<p>javier ramÃrez</p>
<p> ..i do ruby on rails development in madrid, spain, at <a
href="http://www.aspgems.com">http://www.aspgems.com</a>
</p>
<p> <a href="http://javier-ramirez.com" title="javier ramirez">javier
ramirez's home page (http://javier-ramirez.com)</a><br>
<a href="http://formatinternet.com" title="format internet :
ruby on rails blog by javier ramirez">javier ramirez's blog
(http://formatinternet.com)</a><br>
</p>
</div>
</body>
</html>