best way to implement it is using private local relays. tricky to make it work with web browser because of SSL/TLS. probably there is some hack, if you have a domain, to get a cert on the domain and then use it to make the local relay wss and hax the /etc/hosts to point that domain name to your localhost.

i have not even thought about adding full TLS support to a relay's HTTP listener, it's not difficult. the standard setup is to use a reverse proxy that does that but i could probably rip code out of my reverse proxy that does the letsencrypt acme dance and a config tool that adds the domain to hosts to redirect and voila. chrome based browsers happy. most chrome based browser are tricky to allow unencrypted destinations for scripts in a web app.