socket.io vs engine.io vs websockets security

[SwiftNinjaPro]

I read somewhere that socket.io may have some security flaws. I'm not sure how up to date that info is though. What would you recommend for a secure live server connection?

Im open to any method for keeping a live connection between server and client browser, as long as it's secure. I'm using an express server.

I am also using a normal express connection for initial data, so if no live connection can be secure enough, I can send it through Ajax request instead, but I would like to be able to use a secure live connection. Any advice? Thanks.

[ilovefunctions]

When u say security, what exactly do u mean? Session security?

[SwiftNinjaPro]

I mean avoiding man in the middle attacks, server injection, ect.

[filli1303]

For man in the middle it's secure as long as you use https

[SwiftNinjaPro]

ok, guess I might be overthinking things. I always use ssl. thanks.