Support TLS-encrypted protocols over direct-tcpip

[jaksi]

For HTTPS and eventually SMTP, POP3 and IMAP over TLS (#64).
We'll obviously have to use some invalid self-signed cert but maybe attackers won't notice? 👀 One way to find out.

[Kofl]

You could integrate e.g. let's encrypt for valid TLS certificates.

[jaksi]

Thanks for the suggestion!

Since attackers are expected to try and use TCP/IP forwarding to connect to domains we do not control (like an email service), and since Let's Encrypt (and all other trusted CAs) require domain ownership to request and create valid certificates, I don't think this is feasible.
I think the best we can do is create untrusted, self-signed certificates on-demand.