3 ms·
That’s exactly the solution I was thinking of. No end-user visible changes required, just change websocket to require a secret on initial connection. An easy wa
by lstamour 6y ago
That’s exactly the solution I was thinking of. No end-user visible changes required, just change websocket to require a secret on initial connection. An easy way of doing this might be to use the web socket URL path or a query variable. Note that we’re relying on the websocket library code to do the right thing: https://tools.ietf.org/html/rfc6455#section-10.7 https://tools.ietf.org/html/rfc6455#section-10.7
Example, and note: https://news.ycombinator.com/item?id=23261309 https://news.ycombinator.com/item?id=23261309