Re: [hybi] Technical feedback. was: Process!

[Greg Wilkins <[e-mail]>]

Maciej Stachowiak wrote:
> If you are embedding untrusted third party code on your site without doing anything to restrict what it can do, then you have much bigger problems than excessive WebSocket connections.

exactly - which is why connection limits should be enforced by the browser and not the application.

>> Voluntary resource restriction just does not work.
> 
> I think the main limiting factor on use of excess connections is simply that many of the likely use cases would not actually benefit from using more connections (as described in other parts of my previous email).

I still don't think it is a good idea to enable browsers to be the perfect
platform for launching denial of service attacks on any server/port.


regards