[whatwg] spec comments (websocket)

[Wenbo Zhu]

re: http://tools.ietf.org/html/draft-hixie-thewebsocketprotocol-40
1) section 6:  "User agents should not close the Web Socket connection
arbitrarily."

Please clarify what "arbitrarily" means .. given there is no handshake for
close?

2) section 7: "Servers that only accept input from one origin can just send
back that value in the "WebSocket-Origin" header, without bothering to check
the client's value."

I suppose servers should still verify the (single) origin to ensure it
matches .. Yes, the server simple echoes back the received origin
thereafter.

- Wenbo
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.whatwg.org/pipermail/whatwg-whatwg.org/attachments/20090904/fee0ec83/attachment-0002.htm>