Is Ruby on Rails Secure?

Name: Is Ruby on Rails Secure?
Uploaded: 2015-05-07
Duration: 3 min 21 s
Description: Security is not an on/off switch. Three questions to ask whenever you're evaluating the security of any framework or application.

Watch on Vimeo ↗

Question: Is Ruby on Rails secure? What if I add SSL?

Answer: Security is not an on/off switch. You need to ask three questions whenever you’re trying to determine the appropriate security level for anything:

Secure against what?
What is the worst thing that can happen?
Compared to what alternative?

There is no secure switch to make all the risks go away. Security is a process that includes every aspect of the business model, application development, and deployment management practices, not a single magic setting.