Implement WebSocket handshake Sec-* headers about socket.io HOT 5 CLOSED

After doing some more research, these "Sec-WebSocket-" headers are a part of the draft 76 spec for websockets. The old draft 75 spec used "WebSocket-".

Along with this new draft, two "key" headers and an 8-byte body are sent in the request now. You have to strip out all non-digits from the two keys, divide each resulting number by the number of spaces in the original respective keys, convert each result of the division to big-endian, and then concatenate these numbers together as a string. Next, append the 8-byte body to the string. Lastly, create a binary MD5 hash of this string and send it as the body of the response.

I've tried to incorporate this new required security mechanism in Javascript without any luck.

from socket.io.

I don't think any stable build uses Sec* headers. Am I right?

from socket.io.

Just to update: I've managed to get the new draft (76) websocket protocol working after much debugging.

from socket.io.

Well I'll try your fork then ;)

from socket.io.

works perfect. thx 1000+ times !

from socket.io.