News for hackers. Stuff that matters.
Re:An Introduction to Web Sockets by MostAwesomeDude on Saturday July 16, 2011 @08:03PM (#2772147)
I can't watch the slides, but I wonder if they spend any time discussing how WebSockets don't offer any client security beyond raw TCP sockets.
Re:An Introduction to Web Sockets by palish on Saturday July 16, 2011 @08:25PM (#2772168)
Why would WebSockets offer any client security beyond raw TCP sockets?
Re:An Introduction to Web Sockets by MostAwesomeDude on Sunday July 17, 2011 @01:50AM (#2772669)
It was one of the original promises of WS and the reason that browsers offer it to client-side JS.
Re:An Introduction to Web Sockets by camwest on Sunday July 17, 2011 @04:25PM (#2774108)
There are some people building on top of WebSockets with an eye towards security. Check out http://pusher.com/ for example, they designed system to account for 100% untrusted client.
Re:An Introduction to Web Sockets by zeroxsys on Sunday July 17, 2011 @12:18PM (#2773546)
I agree, security in Web Socket must be robust/comprehensive in both ends. This post says so too: http://blog.kotowicz.net/2011/03/html5-websockets-security-n.... Thanks!