- From: Wenbo Zhu <wenboz@google.com>
- Date: Fri, 4 Sep 2009 17:01:34 -0700
re: http://tools.ietf.org/html/draft-hixie-thewebsocketprotocol-40 1) section 6: "User agents should not close the Web Socket connection arbitrarily." Please clarify what "arbitrarily" means .. given there is no handshake for close? 2) section 7: "Servers that only accept input from one origin can just send back that value in the "WebSocket-Origin" header, without bothering to check the client's value." I suppose servers should still verify the (single) origin to ensure it matches .. Yes, the server simple echoes back the received origin thereafter. - Wenbo -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.whatwg.org/pipermail/whatwg-whatwg.org/attachments/20090904/fee0ec83/attachment.htm>
Received on Friday, 4 September 2009 17:01:34 UTC