balanced-payments - 为什么 Balanced Payments 文档说需要 HTTPS，但似乎不需要？

Question

如果我使用一个简单的rails c命令打开我的开发控制台，并通过以下方式获取我的客户：

Balanced::Customer.all

我不仅得到结果，而且我可以使用：

customer = Balanced::Customer.all.first
customer.name = "Joe Bob"
customer.save # this works, returns true
customer = Balanced::Customer.all.first
puts customer.name

结果确实是“Joe Bob”。

我不确定究竟是什么"For security concerns regarding submitted data, all your requests MUST occur via https."意思，如果它似乎不是真的......也许我错过了什么？

Answer 1

The request your system is making to the Balanced API occurs over HTTPS. It does not mean that you need to run a web server over HTTPS however, it would be strongly recommended.

Answer 2

The interactions between your Rails application and Balanced always take place over HTTPS. The part of the documentation you quoted is referring to these interactions. This does not remove the need for you to use SSL on your servers in production as all financial transactions should occur over SSL.