Hsts #1104
-
|
Good day I just started reading about HSTS and I wanna know if it has any way possible from stopping a non-browser client from connecting to a socket.io server |
Beta Was this translation helpful? Give feedback.
Replies: 2 comments
-
|
There is no way to distinguish a browser from a non-browser client. You can look at the user agent, but these are easily spoofed so this isn't a foolproof method. Not sure what HSTS article you read, but there is no relation between HSTS and detecting the type of client that connects to your server, regardless of being a Socket.IO server or just a plain HTTP server. |
Beta Was this translation helpful? Give feedback.
-
|
Ok thank you @miguelgrinberg |
Beta Was this translation helpful? Give feedback.
There is no way to distinguish a browser from a non-browser client. You can look at the user agent, but these are easily spoofed so this isn't a foolproof method. Not sure what HSTS article you read, but there is no relation between HSTS and detecting the type of client that connects to your server, regardless of being a Socket.IO server or just a plain HTTP server.