Secure Web Sockets

5 points by theHackerPerson 3 days ago

Hello, I am trying to implement encrypted messaging into my Python/Flask app. I want to use public key encryption. What is a good library I can use to implement it?

austin-cheney 3 days ago

PKI is for authentication: who can access. Secure WebSockets has nothing to do with authentication, so it’s an additional layer. Secure WebSockets (WSS) is just RFC6455 over TLS.

That said, get your secure WebSockets working without authentication first. You will need certificates whether from a real CA or something you generate yourself. Then once that works you can figure out PKI for authentication. You will have to figure out secure key exchange, key management, and so forth from an organizational perspective.