[Interest] wss:// on localhost

Thiago Macieira thiago.macieira at intel.com
Sun Jul 19 20:41:42 CEST 2020


On Sunday, 19 July 2020 09:50:03 PDT Alexander CarĂ´t wrote:
> a) there is way to get rid of certificates on localhost despite using wss://

Yes, but then it's no better security than ws://. So either use insecure or 
use a certificate.

> b) there is a reliable way of having ws:// and wss:// at the same time

Sorry, I don't know.

What you can do is generate a certificate every couple of months, in each 
machine that uses your application. Make the client use that certificate as 
the only entry in the CA list, so it will accept the certificate from the 
server without prompting a warning.

-- 
Thiago Macieira - thiago.macieira (AT) intel.com
  Software Architect - Intel System Software Products





More information about the Interest mailing list