EventSource / SSE (Server-Sent-Svents) - Security
I have read through the w3 spec @ http://www.w3.org/TR/eventsource/ for how EventSource/SSE works, but I cant find any good information about how a private stream should be created. Basically, I want to create a way to send private data to specific user-sessions. Both the ideas below seems to do what I want, but I am not so sure how secure they are. Example; does every browser connecting to the same EventSource URL receive the same data, and the browser keeps track of what event-name it wants? var source = new EventSource('/stream'); source.addEventListener('l0ngr4nd0mSessionID', function(e){