Implementation should be similar to how TLS works but built on top of the HTTP filter stack.