title: Disabling SSL for a Heroku App
body: <p>I recently changed the domain for a Rails app I have running on Heroku. I redirected the original to the new one, and for the last couple of months have been running SSL on both. I tried to remove SSL from the original domain since all it does is redirect.</p>
  
  <p>I did everything I thought I should:</p>
  
  <ul>
  <li>Turned off SSL in the app with <code>config.force_ssl = false</code> in production.rb</li>
  <li>Changed DNS ALIAS and CNAME to point to "myapp.herokuapp.com"</li>
  <li>Removed the SSL endpoint and certs</li>
  </ul>
  
  <p>If I go to myapp.herokuapp.com, everything is fine, but if I go to myapp.com, or www.myapp.com it automatically tries to take me to the secure version of the site, <a href="https://myapp.com">https://myapp.com</a>, and I get the standard security error warning from my browser.</p>
  
  <p>Am I missing something? Is it a caching issue? Does it just take time for the DNS change to kick in? I've tried on a few machines/browsers, and the issue is consistent across all of them.</p>
  
  <p>Worst case, I can definitely add the SSL Endpoint back on, but it seems like overkill.</p>