ws is not secure. Meaning all your communication isn't encrypted. It's only good for local connections and testing.

wss is secured by SSL, and your communications are encrypted.