Re: [hybi] Can Websockets be used peer to peer? Was Straw Poll: is Upgrade...?

I understand that this can be addressed later, however supporting peer
to peer in the protocol appears to only require a client to also
support the optional masking of the server responses.

In the case of a browser acting as the server, it will need to
implement the server side of things like handshake and unmasking
client messages. However, given that it is really also a client (with
the same unknown intermediataries, etc), I assume that it would be
desirable to have the same security protections as a simple client,
and so it would also want to send messages using masking.

As long as simple clients can also receive messages from a server with
masking enabled, then there appears to be no reason that peer to peer
wouldn't work with the same security guarantees (for the protocol)
that client->server does.

i.e.
client -> server = masked
server -> client = cleartext | masked

How the server notifies the client that it is going to send masked
responses remains unspecified.

Regards,
Brodie

On Fri, Jan 7, 2011 at 7:34 PM, Salvatore Loreto
<salvatore.loreto@ericsson.com> wrote:
> On 1/7/11 2:23 AM, John Tamplin wrote:
>
> On Thu, Jan 6, 2011 at 7:37 PM, Bruce Atherton <bruce@callenish.com> wrote:
>>
>> So far it appears that Greg, Brodie, Jerod, and I favour including
>> peer-to-peer design considerations in the spec. I am not sure, but it sounds
>> like John considers it out of scope and Scott considers it in scope. What
>> about the rest of you?
>
> I am not opposed to it exactly, but given how long everything has taken I am
> keen to keep the base protocol minimal so we can actually get something out
> the door.
>
> I agree with John,
> lets keep the base protocol minimal at moment.
> Once we have reached consensus on the minimal base protocol we can
> start to add other stuff on top of the minimal base.
>
> If there is consensus in doing something in the future we can track it in
> the issue tracker
> so we won't forget.
>
>
> cheers
> /Sal
>
> --
> Salvatore Loreto
> www.sloreto.com
>
> _______________________________________________
> hybi mailing list
> hybi@ietf.org
> https://www.ietf.org/mailman/listinfo/hybi
>
>