Hi DracisLooby,
I didn't had to work with this kind of problematic. The only thing I can say is that having only HTTP is annoying but not hopeless. Inside HTTP, you can just drop some cyphered data...