HTML 5 Web Sockets and XMPP Server Dialog Box

Does using web sockets really mean that browsers will be able to communicate directly with xmpp servers (any other IM servers)?

thank.

+3
source share
3 answers

No. Allowing TCP-level access to arbitrary servers will cause all kinds of security problems. Imagine a website that made every user connect to an SMTP server and start sending spam emails ... all of a sudden you have a massively distributed spam attack, especially when combined with an XSS attack on the main site. Web sockets have a small number of frames around it, designed to make such attacks impossible without adding too much TCP overhead.

+2
source

One day. We will probably define an XMPP subprotocol for websites that can replace BOSH ( XEP-0124 / 0206 ) when both the client and server support it. Meanwhile, BOSH is being widely implemented.

0

HTTP-.... xmpp 8080.

0

Source: https://habr.com/ru/post/1769911/


All Articles