Web Application Messaging Protocol: Difference between revisions

Revision as of 13:07, 2 November 2015

Revision as of 13:43, 6 December 2015

Line 30:

===Security===

As WAMP uses Websocket, connections can be wrapped in [[Transport Layer Security|TLSLTLS]] for encryption. Even when full [[confidentiality]] is not established, several mechanisms are implemented to isolate components and avoid [[man-in-the-middle attack]]s. Default implementations ensure that trying to register an already registered procedure will fail.

Routers can define realms as administrative domains, and clients must specify which realm they want to join upon connection. Once joined, the realm will act as a [[namespace]], preventing clients connected to one to be able to do RPC and PubSub using IDs defined in another. Realms also have permissions attached, and can limit the clients to one subset of the REGISTER/CALL/PubSub actions available.