[gz5]

Encapsulate and encrypt in the app itself, or in the browser.

App (via the openziti sdk): https://blog.openziti.io/no-listening-ports

Browser (the openziti js sdk loads on the fly): https://blog.openziti.io/introducing-openziti-browzer

Disclosure: openziti (apache v2) maintainer

[russfink]

Agree. The stated attack is not against an end to end solution.