title: SignalR secure message delivery
body: <p>So, I got a security related question. </p>
  
  <pre><code>// Code that was originally sent to client from the server
  var hub = $.connection.hubname;        
  hub.name = "UserIdFromDataBase";
  </code></pre>
  
  <p>If some malicious user will write a simple html page with the same code, will he receive all messages that will be sent the original user?</p>
  
  <p>(Actually I want to organize chat between registered users that is why name/clientid should be provided by server side).</p>
  
  <p>Thanks</p>
  
  <p><strong>UPD:</strong></p>
  
  <blockquote>
    <p>I created a related issue at the project portal:
    <a href="https://github.com/SignalR/SignalR/issues/432" rel="nofollow">https://github.com/SignalR/SignalR/issues/432</a></p>
  </blockquote>