Websocket security

mex nginx-forum at forum.nginx.org
Thu Apr 6 07:40:56 UTC 2017


Hello christian,


naxsi-contributor first

bad news first:

naxsi wouldnt work on websockets.

Any other security for websockets you have to implement yourself.


list of usefull reads:
- https://devcenter.heroku.com/articles/websocket-security
-
https://security.stackexchange.com/questions/48378/anti-dos-websockets-best-practices/
- https://gist.github.com/subudeepak/9897212
- https://kaazing.com/2012/02/28/html5-websocket-security-is-strong/



regards, 


mex

Posted at Nginx Forum: https://forum.nginx.org/read.php?2,273438,273440#msg-273440



More information about the nginx mailing list