Essential - Fix modification of traffic by the middlebox (causes MAC integrity failure) Nice to have - Ideally allow cert files to be supplied at command line or in config - Integrate into a proxy and simple web server (e.g. flask / cherrypy )