Possible backend change to something more secure

[Shadow53]

JavaScript isn't exactly known for being a secure language. There isn't necessarily much secure information to intercept, but that doesn't mean that the program shouldn't be as secure as reasonably possible.

With this in mind, perhaps I should look into rewriting the backend in another language - which would mean reimplementing the websockets on the frontend as well. Given that this program is currently running on my own server hosted by A Small Orange, compatible languages are:

• PHP
  • Two possible websocket solutions are Ratchet and PHPWebSockets
• Ruby on Rails
  • https://github.com/websocket-rails/websocket-rails - supports Phusion Passenger, what ASO uses
  • https://github.com/igrigorik/em-websocket - well-recommended on Stack Overflow
• Python/Django/Flask
  • Would have to decide between Django and Flask
  • Both have support for websockets

Things I should also keep in mind:

• I have a little amount of experience in PHP and Python and none in Ruby
  • Though Ruby I hear is easy to learn and understand

[Shadow53]

I think I'm going to leave this for now and flesh out a more complete product. The JavaScript backend seems to work fine for now and there doesn't seem to be need for another overhaul.

I'm choosing to leave this issue open for now, but I'm marking it with a wontfix label.