SSL Doesn't really protect against a MitMA. In hindsight, this method really doesn't either. However, this method does provide some level of obscurity to your password which is good, but in no means does it replace the need for SSL certs.
A VPN tunnel or something similar would be a much safer bet. I really should have made the episode more around the ability to have a secure communicate between two users or something. Yes, a trusted Certificate Authority does issue SSL certificates to someone when they can verify a level of ownership to a domain.
Nothing more universal and low cost like a WiFi equip mobile phone with a camera on it. I've been looking around at this and think I'll cover this soon. More for fun than anything else.
https://ruby-doc.org/stdlib-2.1.1/libdoc/date/rdoc/Date.html#method-c-today
Date.today is a ruby core class and method which creates a date object of the current date.
Great topic. Will add to my TODO list.
Can you post the JS and Routes file?