{"action":"created","issue":{"url":"https://api.github.com/repos/phoenixframework/phoenix_guides/issues/490","repository_url":"https://api.github.com/repos/phoenixframework/phoenix_guides","labels_url":"https://api.github.com/repos/phoenixframework/phoenix_guides/issues/490/labels{/name}","comments_url":"https://api.github.com/repos/phoenixframework/phoenix_guides/issues/490/comments","events_url":"https://api.github.com/repos/phoenixframework/phoenix_guides/issues/490/events","html_url":"https://github.com/phoenixframework/phoenix_guides/pull/490","id":147046299,"number":490,"title":"add ssl to heroku database config","user":{"login":"bgentry","id":114033,"avatar_url":"https://avatars.githubusercontent.com/u/114033?v=3","gravatar_id":"","url":"https://api.github.com/users/bgentry","html_url":"https://github.com/bgentry","followers_url":"https://api.github.com/users/bgentry/followers","following_url":"https://api.github.com/users/bgentry/following{/other_user}","gists_url":"https://api.github.com/users/bgentry/gists{/gist_id}","starred_url":"https://api.github.com/users/bgentry/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bgentry/subscriptions","organizations_url":"https://api.github.com/users/bgentry/orgs","repos_url":"https://api.github.com/users/bgentry/repos","events_url":"https://api.github.com/users/bgentry/events{/privacy}","received_events_url":"https://api.github.com/users/bgentry/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":11,"created_at":"2016-04-08T21:39:11Z","updated_at":"2016-04-10T19:20:28Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/phoenixframework/phoenix_guides/pulls/490","html_url":"https://github.com/phoenixframework/phoenix_guides/pull/490","diff_url":"https://github.com/phoenixframework/phoenix_guides/pull/490.diff","patch_url":"https://github.com/phoenixframework/phoenix_guides/pull/490.patch"},"body":"Heroku Postgres requires SSL when connecting to databases:\r\nhttps://devcenter.heroku.com/articles/heroku-postgresql#heroku-postgres-ssl\r\n\r\nThis updates the Heroku deployment guide to instruct users to enable SSL on their Ecto Postgres setup."},"comment":{"url":"https://api.github.com/repos/phoenixframework/phoenix_guides/issues/comments/208047361","html_url":"https://github.com/phoenixframework/phoenix_guides/pull/490#issuecomment-208047361","issue_url":"https://api.github.com/repos/phoenixframework/phoenix_guides/issues/490","id":208047361,"user":{"login":"bgentry","id":114033,"avatar_url":"https://avatars.githubusercontent.com/u/114033?v=3","gravatar_id":"","url":"https://api.github.com/users/bgentry","html_url":"https://github.com/bgentry","followers_url":"https://api.github.com/users/bgentry/followers","following_url":"https://api.github.com/users/bgentry/following{/other_user}","gists_url":"https://api.github.com/users/bgentry/gists{/gist_id}","starred_url":"https://api.github.com/users/bgentry/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bgentry/subscriptions","organizations_url":"https://api.github.com/users/bgentry/orgs","repos_url":"https://api.github.com/users/bgentry/repos","events_url":"https://api.github.com/users/bgentry/events{/privacy}","received_events_url":"https://api.github.com/users/bgentry/received_events","type":"User","site_admin":false},"created_at":"2016-04-10T19:20:28Z","updated_at":"2016-04-10T19:20:28Z","body":"Thanks for clarifying, @hgmnz! FYI, there were definitely some inconsistencies in Dev Center around this subject when I searched for \"postgres SSL\" or something similar.\r\n\r\nIn light of this info, I do believe that this PR should be merged as-is because:\r\n\r\n1. TLS works for everybody using Heroku Postgres\r\n2. In the not-too-distant future, TLS will be required for all Heroku Postgres instances\r\n3. In most other languages, TLS gets used anyway with Heroku Postgres because libpq defaults to the `prefer` setting (using encryption if the server allows it). Seems like Ecto does not have an equivalent, instead having only `true` or `false` settings. I think there's also a good case to be made that the defaults here should be similar to what most people coming from other languages would expect with Postgres, and enabling encryption is the correct choice given that.\r\n\r\nPlease do let me know if there are other issues with the PR that you'd like me to resolve! :v:"}}