Should You Move Away From Heroku To Protect Your Users? (aftnn.org)

Heroku provides an SSL add-on for encrypting traffic between browsers and the Heroku network. However, SSL is terminated at the Heroku routing layer. Traffic is then passed unecrypted through the network to your application. That network is AWS.