# Proper way to enforce https only?

**URL:** <https://forum.elixirforum.com/t/proper-way-to-enforce-https-only/2117>\
**Category:** Questions\
**Tags:** phoenix, https\
**Created:** [October 25, 2016, 8:11pm UTC](https://forum.elixirforum.com/t/proper-way-to-enforce-https-only/2117 "2016-10-25T20:11:08Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![ibgib](https://forum.elixirforum.com/user_avatar/forum.elixirforum.com/ibgib/32/2176_2.png) [@ibgib](https://forum.elixirforum.com/u/ibgib)\
**Post date:** [October 25, 2016, 9:46pm UTC](https://forum.elixirforum.com/t/proper-way-to-enforce-https-only/2117/3 "2016-10-25T21:46:01Z")

</div>

> [@josevalim](#):
>
> FWIW, in my experience Plug.SSL, which is what Phoenix uses behind the scenes for force\_ssl: [hsts: true], works fine.

Thanks @josevalim. I think that may be the sanity check that I’m looking for, as reading the [docs](https://hexdocs.pm/plug/Plug.SSL.html) it seems obvious what it should do…but I’m just not seeing it happening! 🙈

It is probably a docker configuration issue that I just haven’t been able to pin down yet. 📌

---

_[View the full topic](https://forum.elixirforum.com/t/proper-way-to-enforce-https-only/2117)._