[Interest] Security thoughts on Webchannel

[Jason H]

Your questions aren't really answerable. What are the concerns? 
Define "isolation": thread, process, bus, other?
Why are you asking Qt? Websockets are not Qt. They are a RFC (6455). Are you asking specifically about Qt's implementation? It sounds like you are asking a more general question.


> Sent: Friday, June 22, 2018 at 4:19 AM
> From: "Florian Hertrampf" <florian.hertrampf at uni-jena.de>
> To: interest at qt-project.org
> Subject: [Interest] Security thoughts on Webchannel
>
> Hello everyone,
> 
> I started using the WebChannel stuff to deploy my applications to a  
> Docker container and provide a web-based, interactive GUI.
> Now, I think about using this mechanism to authenticate various users  
> for information access via webbrowser.
> Private information may provided, so I think of the security of the  
> Webchannel.
> 
> Is there any isolation between client and server object?
> Is a client-added function simply pushed to the server and executed?