News for hackers. Stuff that matters.
Re:Announcing Free and Automated SSL Certs by nsgi on Tuesday March 21, 2017 @06:42PM (#13926963)
There are ways of doing that without sacrificing security. Making TLS a paid-only feature makes no more sense than making CSRF protection a paid-only feature.
Re:Announcing Free and Automated SSL Certs by hamandcheese on Tuesday March 21, 2017 @11:38PM (#13928296)
On Heroku, TLS is enabled if you use the *.herokuapp.com domain, even on free plans.

So really they are charging you if you need a custom domain and security (i.e. Something most businesses do need and most hobbies don't).

Seems a like a reasonable and fair way to segment their market to me.