Open moeenio opened 3 years ago
When a message comes to the server, it gets encrypted into a variable. And... that's it.
Considering that messages are not stored on server, and that the websockets protocol is encrypted by itself, isn't the encryption stuff in backend useless?
I am unsure upon this as our original backend developer assured me that it would prevent MITM attacks.
haha
When a message comes to the server, it gets encrypted into a variable. And... that's it.
Considering that messages are not stored on server, and that the websockets protocol is encrypted by itself, isn't the encryption stuff in backend useless?