[derefr]

With only a bit of extra state-machine glue, you'd have a clean and standards-compliant websocket-based VPN.