The HTTP bindings of the Transport SPI (spec §5.5, SRAD srad/agentspaces-js.md §3.3): ws and wss (RFC 6455, one binary message per frame, subprotocol aspace.1) and the http and https request and response exchange (appendix C), on Netty's HTTP codec. wss attests JVM dialers with the same channel certificates as tls and quic (spec §5.6); a browser connects unattested and proves its identity in band by session attestation.