title: Securing Rails API with https
body: <p>I'm creating my first API and am using Ruby on Rails. The API will strictly be server to server. I've done a lot of <a href="http://www.thebuzzmedia.com/designing-a-secure-rest-api-without-oauth-authentication/" rel="nofollow">reading</a> on the methods of securing an API like this and have decided that using https might be the easiest method, rather than Oauth.</p>
  
  <p>Additional Info:</p>
  
  <ul>
  <li>API is pretty simple and read only</li>
  <li>The data I'm providing is not cheap and I need to show our data provider and partner that the API is secure and that their data will be protected from theft. This is the only reason I need it secured. </li>
  </ul>
  
  <p>My initial plan is to simply use a private key that will be sent over https. I don't need to worry about the client sharing this key because they are billed based on usage. </p>
  
  <p>My question is how do you go about enforcing use of https on the client server? Are there any other things I need to do on my end other than require the API routes use https protocol?</p>