Application-level protocols in the browser

on YouTube ↗44m

" summary

Explains how implementing custom application-layer protocols inside the browser can improve channel utilization, enable arbitrary encryption, manage session state, and enforce data-format constraints to work around limitations of existing protocols. Reviews the historical browser landscape (HTTP(S), FTP, Java/Flash sandboxes, and extensions) and argues that delivering browser extensions at scale was a major practical obstacle motivating in-browser protocol control.

AI-written summary · about

" chapters (8)

1. 0:00Introduction
2. 7:41Browser transport limits
3. 13:27Technology choices
4. 24:08Existing solutions
5. 33:56Protocol optimization
6. 38:31Web Workers
7. 40:14Proxy issues
8. 42:45Q&A

" related talks

• 08mLightning Talks: Secure Communication between Extensions and ApplicationsPavel Studený · NDC Oslo 2018
• 21mWeb Browsers: Om nom nomSteve Klabnik · dotRB 2013
• 50mMost useful browser APIsPavol Hejný · DevConf.CZ 2020
• 42mThe Perilous Future of Browser SecurityRobert Hansen · AppSecUSA 2013
• 45mThe Browser as a Platform for Heavyweight ApplicationsIvan Zatravkin · HolyJS 2024 Spring
• 23mNew kids in browserlandSwapnil Agarwal · JSFoo 2018
• 39mDoes The Browser Have A FutureTim Bray · GOTO Copenhagen 2014
• 55mWeb Application Security: Browsers Fight Back!Christian Wenz · NDC London 2017