Re:An Introduction to Web Sockets
by MostAwesomeDude on Saturday July 16, 2011 @08:03PM
(#2772147)
I can't watch the slides, but I wonder if they spend any time discussing how WebSockets don't offer any client security beyond raw TCP sockets.
[ Parent
| on HN ]
Why would WebSockets offer any client security beyond raw TCP sockets?
Re:An Introduction to Web Sockets
by MostAwesomeDude on Sunday July 17, 2011 @01:50AM
(#2772669)
It was one of the original promises of WS and the reason that browsers offer it to client-side JS.
There are some people building on top of WebSockets with an eye towards security. Check out http://pusher.com/ for example, they designed system to account for 100% untrusted client.
I agree, security in Web Socket must be robust/comprehensive in both ends. This post says so too: http://blog.kotowicz.net/2011/03/html5-websockets-security-n.... Thanks!