I think he means getting devs who deploy Rails apps to start using HTTPS for their app, rather than there being a deficiency in the framework.