Re: [hybi] Extensibility mechanisms?

[Adam Barth <[e-mail]>]

On Sun, Apr 18, 2010 at 1:47 PM, Greg Wilkins <[e-mail]> wrote:
> Ian Hickson wrote:
>> If the handshake involves an optional opt-in to a non-standard
>> experimental feature, and you accept it, then you're not upgrading to Web
>> Socket, you're upgrading to a non-standard protocol influenced by Web
>> Sockets, as defined by the convention you and the client are using.
>
> My point is that an intermediary can't possible know about
> all subprotocols (experimental or otherwise), nor be expected
> to upgrade everytime a new subprotocol is invented.
>
> Intermediaries can know about websocket framing and so long as
> all sub protocols and extensions are restricted to adhere to
> websocket framing, then intermediaries can continue to work
> regardless of sub protocols.

I'm not sure I buy the premise that we want intermediaries to
understand and/or interfere with the websocket protocol.  It seems
more robust and more secure to establish a point-to-point encrypted
tunnel between the user agent and the server.

Adam