Websockets don't support non-masked messages

[ssmithup]

Websockets don't support non-masked messages

[tailhook]

Masking is not for security (encryption), its there theoretically to work better with proxies (to deny several kinds of attacks for cache poisoning).

Anyway, having non-masked traffic is not supported by RFC 6455. If you are talking server-to-server (all browsers use masking anyway), you can use mask of all zeros.

[ssmithup]

Oh thanks, I didn't realize that! I'll add masking to our library.

On Wed, Dec 19, 2012 at 2:16 AM, Paul Colomiets [email protected]:

Masking is not for security (encryption), its there theoretically to work
better with proxies (to deny several kinds of attacks for cache poisoning).

Anyway, having non-masked traffic is not supported by RFC 6455. If you are
talking server-to-server (all browsers use masking anyway), you can use
mask of all zeros.

—
Reply to this email directly or view it on GitHubhttps://github.com//issues/5#issuecomment-11524795.