Add warning description about the AES-GCM cipher.
This commit is contained in:
@@ -306,6 +306,15 @@ func (s socket) Get(
|
|||||||
wsWriter := websocketWriter{Conn: c}
|
wsWriter := websocketWriter{Conn: c}
|
||||||
|
|
||||||
// Initialize ciphers
|
// Initialize ciphers
|
||||||
|
//
|
||||||
|
// WARNING: The AES-GCM cipher is here for authenticating user login. Yeah
|
||||||
|
// it is overkill and probably not correct. But I eventually decide
|
||||||
|
// to keep it as long as it authenticates (Hopefully in a safe and
|
||||||
|
// secured way).
|
||||||
|
//
|
||||||
|
// DO NOT rely on this if you want to secured communitcation, in
|
||||||
|
// that case, you need to use HTTPS.
|
||||||
|
//
|
||||||
readNonce := [socketGCMStandardNonceSize]byte{}
|
readNonce := [socketGCMStandardNonceSize]byte{}
|
||||||
_, nonceReadErr := io.ReadFull(&wsReader, readNonce[:])
|
_, nonceReadErr := io.ReadFull(&wsReader, readNonce[:])
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user