javascript - Is it possible to force socket.io to use wss instead of ws, without having to change to https? -
i have been trying setup server users can send sign in using websockets, don't want using ws. want able turn on wss without having https. sadly, there aren't options this. , question how 1 on client side without using https protocol.
from websocket protocol specification:
a
wss
uri identifies websocket server , resource name, , indicates traffic on connection protected via tls (including standard benefits of tls such data confidentiality , integrity, , endpoint authentication).
emphasis mine
now can understand absurdity of request: wss is https.
of course terminology wrong (https different protocol wss) bottom of line both version of respective tcp plain protocols (http , ws) on tls.
so answer no.
as matter of fact securty complex thing.
experienced programmers refrain inventing or exploring new ways and, based on kind of question asked, don't appear expert on field.
so it's better things best-practices say, use "https" use "https".
starting studying security (or hiring contractor) advised, inventing new ways perform secure authentication not, unless have phd in abstract algebra , several years of experience in developing cryptographic schemes.
Comments
Post a Comment