<div dir="ltr"><br><div class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Apr 17, 2014 at 9:35 PM, Florian Schrofner <span dir="ltr"><<a href="mailto:florian.schrofner@outlook.com" target="_blank">florian.schrofner@outlook.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">I thought about that too.. but I didn't really see the difference, since<br>
everybody who knows the link to the broker can also invoke a push without<br>
authentication, can't he?<br></blockquote><div>Right, there is no difference, except that you don't have to patch UPS, that you can later secure this REST endpoint and that you deleguate a generic behaviour (sending push messages) to a single place. </div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<br>
Also setting up another server just for forwarding request seems a bit<br>
overpowered to me (and a lot more work)..<br></blockquote><div> </div><div>I understand but put in balance the work to create a simple broker and maintain a patched UPS </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<br>
As long as I don't unintentionally open a huge security hole by patching the<br>
server it shouldn't make that much difference, should it?<br></blockquote><div>Well if someone knows your MasterID he can potentially send millions of notifications to all the devices :) </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<br>
Maybe we'll build the first prototypes using the patched aerogear server and<br>
switch to the broker later on.<br>
Nodejs would be the best option for the broker, I guess?<br></blockquote><div><br></div><div>Yeah NodeJS could be a good option, look at this single NodeJS server page that does almost all what you want : <a href="https://github.com/sebastienblanc/hackergarten-messenger/blob/master/server/index.js">https://github.com/sebastienblanc/hackergarten-messenger/blob/master/server/index.js</a> </div>
<div><br></div><div>Thx again for your interest ! </div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<br>
<br>
<br>
--<br>
View this message in context: <a href="http://aerogear-dev.1069024.n5.nabble.com/aerogear-dev-Allow-Push-Without-Master-Secret-tp7474p7493.html" target="_blank">http://aerogear-dev.1069024.n5.nabble.com/aerogear-dev-Allow-Push-Without-Master-Secret-tp7474p7493.html</a><br>
<div class=""><div class="h5">Sent from the aerogear-dev mailing list archive at Nabble.com.<br>
_______________________________________________<br>
aerogear-dev mailing list<br>
<a href="mailto:aerogear-dev@lists.jboss.org">aerogear-dev@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/aerogear-dev" target="_blank">https://lists.jboss.org/mailman/listinfo/aerogear-dev</a><br>
</div></div></blockquote></div><br></div></div>