Peter Dunkley writes:
sipML5 is using HTTP by default, not HTTPS.
All WebSocket frames from clients (so from a browser to Kamailio) are
masked and you can't just read them. I believe that there is code in
the Wireshark repo to de-mask WebSocket frames - but it hasn't made it
into a release yet.
All WebSocket frames from servers (so from Kamailio to a browser) are
unmasked, so you can read them in Wireshark (but they don't get decoded
as SIP).
thanks for the explanation. it was weird to see replies in clear, but
not the requests.
-- juha