librelist archives

Mongrel2 + WebSockets

From:

Raj, Sudhaker

Date:

2011-06-30 @ 14:24

Does Mongrel2 support WebSockets?

This is what I see in the documentation but looks like this is old information.

Ref: http://mongrel2.org/static/mongrel2-manual.html#x1-600005.1.3

5.1.3 WebSockets
Mongrel2 does not support WebSockets because the original protocol was a 
complete ugly hack with security holes galore. They've since fixed the 
entire protocol and we'll be implementing the hybi-07 version of the 
protocol in the 1.7 or 1.8 release. 

Thanks,

- Sudhaker



----------------------------------------------------------------------
This message w/attachments (message) is intended solely for the use of the
intended recipient(s) and may contain information that is privileged, 
confidential or proprietary. If you are not an intended recipient, please 
notify the sender, and then please delete and destroy all copies and 
attachments, and be advised that any review or dissemination of, or the 
taking of any action in reliance on, the information contained in or 
attached to this message is prohibited. 
Unless specifically indicated, this message is not an offer to sell or a 
solicitation of any investment products or other financial product or 
service, an official confirmation of any transaction, or an official 
statement of Sender. Subject to applicable law, Sender may intercept, 
monitor, review and retain e-communications (EC) traveling through its 
networks/systems and may produce any such EC to regulators, law 
enforcement, in litigation and as required by law. 
The laws of the country of each sender/recipient may impact the handling 
of EC, and EC may be archived, supervised and produced in countries other 
than the country in which you are located. This message cannot be 
guaranteed to be secure or free of errors or viruses. 

References to "Sender" are references to any subsidiary of Bank of America
Corporation. Securities and Insurance Products: * Are Not FDIC Insured * 
Are Not Bank Guaranteed * May Lose Value * Are Not a Bank Deposit * Are 
Not a Condition to Any Banking Service or Activity * Are Not Insured by 
Any Federal Government Agency. Attachments that are part of this EC may 
have additional important disclosures and disclaimers, which you should 
read. This message is subject to terms available at the following link: 
http://www.bankofamerica.com/emaildisclaimer. By messaging with Sender you
consent to the foregoing.

Hi Raj,

I recently commited suppor based on the latest draft version of
websockets: "draft-ietf-hybi-thewebsocketprotocol-09"

Since the handler itself does everything but the framing of the packets
and the framing is identical for versions 07-09, those 3 versions should
work.  As far as I know, firefox 6 is the only browser with built-in
support for -07 or newer, but I have heard of (but not used) a flash
implementation of -07 at:
https://github.com/gimite/web-socket-js/tree/hybi-07

I hope to make a simple demo of this sometime this week to show how it
works.

But if your question is "Does mongrel2 support websockets with
chrom(e/ium)?" the answer is no, and it won't until you see some action
on this:
http://code.google.com/p/chromium/issues/detail?id=64470

-Jason

On 10:24 Thu 30 Jun     , Raj, Sudhaker wrote:
> 
> Does Mongrel2 support WebSockets?
> 
> This is what I see in the documentation but looks like this is old information.
> 
> Ref: http://mongrel2.org/static/mongrel2-manual.html#x1-600005.1.3
> 
> 5.1.3 WebSockets
> Mongrel2 does not support WebSockets because the original protocol was a
complete ugly hack with security holes galore. They've since fixed the 
entire protocol and we'll be implementing the hybi-07 version of the 
protocol in the 1.7 or 1.8 release. 
> 
> Thanks,
> 
> - Sudhaker
> 
> 
> 
> ----------------------------------------------------------------------
> This message w/attachments (message) is intended solely for the use of 
the intended recipient(s) and may contain information that is privileged, 
confidential or proprietary. If you are not an intended recipient, please 
notify the sender, and then please delete and destroy all copies and 
attachments, and be advised that any review or dissemination of, or the 
taking of any action in reliance on, the information contained in or 
attached to this message is prohibited. 
> Unless specifically indicated, this message is not an offer to sell or a
solicitation of any investment products or other financial product or 
service, an official confirmation of any transaction, or an official 
statement of Sender. Subject to applicable law, Sender may intercept, 
monitor, review and retain e-communications (EC) traveling through its 
networks/systems and may produce any such EC to regulators, law 
enforcement, in litigation and as required by law. 
> The laws of the country of each sender/recipient may impact the handling
of EC, and EC may be archived, supervised and produced in countries other 
than the country in which you are located. This message cannot be 
guaranteed to be secure or free of errors or viruses. 
> 
> References to "Sender" are references to any subsidiary of Bank of 
America Corporation. Securities and Insurance Products: * Are Not FDIC 
Insured * Are Not Bank Guaranteed * May Lose Value * Are Not a Bank 
Deposit * Are Not a Condition to Any Banking Service or Activity * Are Not
Insured by Any Federal Government Agency. Attachments that are part of 
this EC may have additional important disclosures and disclaimers, which 
you should read. This message is subject to terms available at the 
following link: 
> http://www.bankofamerica.com/emaildisclaimer. By messaging with Sender 
you consent to the foregoing.
> 

On Thu, Jun 30, 2011 at 10:24:35AM -0400, Raj, Sudhaker wrote:
> 
> Does Mongrel2 support WebSockets?

It's in the works to support the new hybi protocol specification, but
*not* any previous specifications.

-- 
Zed A. Shaw
http://zedshaw.com/