[wmf]

NaCl intentionally has the same sandbox, same security model, and same I/O capabilities as JS. In this case, NaCl would still be limited to XHR or WebSocket.

[cheald]

Ah, I didn't know that. How does naclssh do it, then? It seemed like it was going far more low-level than the standard sandboxed security.

[DougBTX]

From the snippet you posted above, it looks like it depends on a "websocket-to-socket proxy".

[cheald]

Aha, okay. Misunderstanding on my part, then!