web socket security consideration

[qiuzhong]

Currently, the bridge provides web socket interface by

ws://localhost:9090

In that case, all the security-related operations (auth) data is exposed in the socket transmission. What about using web socket security protocol (wss://)?