<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>Motivation here is that to use native crypto support emerging in browsers in NDN-JS (with a significant performance gain) requires delivering ndn.js and other elements over TLS. </div>
<div>Jeff </div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Alex Afanasyev <<a href="mailto:alexander.afanasyev@ucla.edu">alexander.afanasyev@ucla.edu</a>><br>
<span style="font-weight:bold">Date: </span>Fri, 23 Jan 2015 12:30:20 -0800<br>
<span style="font-weight:bold">To: </span>Wentao Shang <<a href="mailto:wentaoshang@gmail.com">wentaoshang@gmail.com</a>><br>
<span style="font-weight:bold">Cc: </span>nfd-dev <<a href="mailto:nfd-dev@lists.cs.ucla.edu">nfd-dev@lists.cs.ucla.edu</a>><br>
<span style="font-weight:bold">Subject: </span>Re: [Nfd-dev] Secure websocket support in NFD?<br>
</div>
<div><br>
</div>
<blockquote id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style="BORDER-LEFT: #b5c4df 5 solid; PADDING:0 0 0 5; MARGIN:0 0 0 5;">
<div>
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div class="">I think besides the basic support from the library, the actual problem with TLS is necessity to get actual CA-issued certificate and then configure it.</div>
<div class="">I would suggest not having such support (at least not in the near future).</div>
<div class=""><br class="">
</div>
<div class="">Things can get relative simple if we integrated with Alex Halderman's <a href="https://letsencrypt.org/" class="">https://letsencrypt.org/</a> here, but it still will only apply to NFD’s that has domain names (e.g., some gateway nodes).</div>
<div class=""><br class="">
</div>
<div class="">—</div>
<div class="">Alex</div>
<br class="">
<div>
<blockquote type="cite" class="">
<div class="">On Jan 23, 2015, at 12:21 PM, Wentao Shang <<a href="mailto:wentaoshang@gmail.com" class="">wentaoshang@gmail.com</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">Hi Jeff T,
<div class=""><br class="">
</div>
<div class="">The WebSocket library we are using in NFD is 'websocketpp'</div>
<div class=""><br class="">
</div>
<div class=""><a href="http://www.zaphoyd.com/websocketpp" class="">http://www.zaphoyd.com/websocketpp</a></div>
<div class=""><br class="">
</div>
<div class="">It supports WebSocket over TLS but we haven't added that to NFD yet. If there is consensus that this will be useful, we can add wss support in the next release of NFD (the only issue is to pick a port number for wss server).</div>
<div class=""><br class="">
</div>
<div class="">Best,</div>
<div class="">Wentao<br class="">
<br class="">
<div class="gmail_quote">On Fri Jan 23 2015 at 10:53:50 AM Thompson, Jeff <<a href="mailto:jefft0@remap.ucla.edu" class="">jefft0@remap.ucla.edu</a>> wrote:<br class="">
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style="word-wrap: break-word; font-size: 14px; font-family: Calibri, sans-serif;" class="">
<div class="">Hello NFD team,</div>
<div class=""><br class="">
</div>
<div class="">If a web page is served over https, and the JavaScript in the web page wants to make a WebSocket connection, then this connection must be over secure WebSocket over TLS (wss). This means that if a web page servered over https needs to communicate
with an NFD host, then the WebSocket proxy in NFD needs to support secure WebSocket.</div>
<div class=""><br class="">
</div>
<div class="">Does the WebSocket library used by NFD support secure TLS connections (wss)?</div>
<div class=""><br class="">
</div>
<div class="">Thanks,</div>
<div class="">- Jeff T</div>
</div>
</blockquote>
</div>
</div>
</div>
</blockquote>
</div>
<br class="">
</div>
</div>
_______________________________________________ Nfd-dev mailing list <a href="mailto:Nfd-dev@lists.cs.ucla.edu">
Nfd-dev@lists.cs.ucla.edu</a> <a href="http://www.lists.cs.ucla.edu/mailman/listinfo/nfd-dev">
http://www.lists.cs.ucla.edu/mailman/listinfo/nfd-dev</a> </blockquote>
</span>
</body>
</html>