title: SignalR: how to implement signing or encryption of requests/responses
body: <p>I'm looking for input around options to implement signing/encryption of data being transferred by SignalR. SSL may not be an option for us due to deployment environments which are not in our control.</p>
  
  <p>What would be the recommended way to do this within the SignalR framework?</p>
  
  <p>We are aware that it is possible to build a HubPipelineModule which could be injected into the process, however this module doesn't appear to have access to the incoming request stream.</p>
  
  <p>We could encrypt or sign the data before passing to SignalR, and pass the encrypted data (or plain text plus HMAC) to the server as string parameters, but feel it would be cleaner if we could utilise the pipeline model to handle it within the framework itself.</p>
  
  <p>Any suggestions? Are we looking at custom JSON deserializers for this purpose?</p>
  
  <p>Also, our clients are .NET initially, so we would be looking for a clean implementation client-side also.</p>
  
  <p>Many thanks</p>
  
  <p>Simon</p>