Use TLS WebSockets (wss://) for proxy-to-server communication
We might as well use secure WebSockets (wss://) instead of plain WebSockets (ws://).
For this, the server plugin needs TLS support. It can probably be cribbed from meek-server, which defaults to TLS.
I started a thread asking for brainstorming on how to easily used Let's Encrypt with a specialized HTTP server like out server plugins.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information