Application‑Level Protocols in the Browser
summary
Examines implementing custom application-layer protocols inside web browsers to better use bandwidth, enable arbitrary encryption, manage session state, and constrain data formats. Discusses limitations of relying only on built-in protocols (HTTP(S), FTP), plug-in sandboxes (Java, Flash) and browser extensions, and argues that controlling the application protocol in the browser can provide independence from existing protocol shortcomings and other operational benefits.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 2:57Transport layer issues
- 10:36Browser socket limits
- 16:16Transport layer design
- 24:08Off-the-shelf solutions
- 30:00Buffer protocol and data optimization
- 34:12Message structure and encoding
- 38:10Compression and channel management
- 40:14Proxy and HTTPS issues
related talks
08mLightning Talks: Secure Communication between Extensions and Applications
55mWeb Application Security: Browsers Fight Back!
42mThe Perilous Future of Browser Security
21mWeb Browsers: Om nom nom
11mWhat your browser can teach you about software security
50mEnhancing Application Security: Understanding and Utilizing Browser Security Features
40mWeb Applications of the Future
50mMost useful browser APIs