- TLS for both WS and TCP
 - authn, authz