basic the server-side implementation done.
missing: persistence (logging), SSL fingerprint check