Peter Dunkley writes:
sipML5 is using HTTP by default, not HTTPS.
All WebSocket frames from clients (so from a browser to Kamailio) are masked and you can't just read them. I believe that there is code in the Wireshark repo to de-mask WebSocket frames - but it hasn't made it into a release yet.
All WebSocket frames from servers (so from Kamailio to a browser) are unmasked, so you can read them in Wireshark (but they don't get decoded as SIP).
thanks for the explanation. it was weird to see replies in clear, but not the requests.
-- juha