Corporate security hates websockets though, SSE is much easier for end-users to get approved.