Working with HTTPS

WEBSOCKET_NETWORKING.md

@@ -41,7 +41,7 @@ configured player slot connects or disconnects.
 
 `WebsocketGameClient` implements `IGameServer`.
 
-- It connects asynchronously to `ws://127.0.0.1:8080/`.
+- It connects asynchronously to a `ws://` or `wss://` endpoint (`WebsocketEndpoint::parse`).
 - Received messages are queued by the network thread and applied on the game
   thread from `update()`.
 - It maintains an internal `InternalGameServer` replica so existing snapshot
@@ -145,6 +145,13 @@ Networking is enabled for Windows and the Emscripten web client:
   replica, and remote-host code, and links Emscripten's `websocket.js` library.
   `WebsocketGameClient.cpp` selects the browser WebSocket API on Emscripten; it
   does not use Boost.Asio or Boost.Beast there.
+- `wss://` (TLS) is supported by the Windows client only. `proj-windows` also defines
+  `NETWORK_TLS` and links static OpenSSL 3.4.1, which CMake downloads and builds
+  automatically at configure time (`cmake/ThirdParty.cmake`, section 12) using a
+  downloaded portable Strawberry Perl and the nmake from the installed Visual Studio
+  (located through `vswhere`). Builds go to `thirdparty/openssl-3.4.1/install-Debug`
+  and `install-Release`; later configures skip them. `NETWORK_TLS` unset (server tests)
+  means `wss://` endpoints fail with a logged error.
 - Linux and Android builds do not define `NETWORK` and do not compile the
   network transport.
 
@@ -196,7 +203,10 @@ submission, and contiguous tick consumption.
   not implemented.
 - There is no authentication or reconnect/replay history.
 - A hash mismatch is logged but does not yet trigger checkpoint resynchronization.
-- The endpoint is hardcoded in the graphical client.
+- The endpoint is hardcoded in the graphical client (`kMultiplayerServerUrl` in
+  `Game.cpp`, currently `wss://api.shadowoverbishkek.com/server001/`).
+- TLS certificate or hostname problems are logged but deliberately do not abort the
+  connection. `GameServer` itself has no TLS; it must sit behind a TLS-terminating proxy.
 - Multiplayer Lua and dialogue behavior remains unsupported.
 - Determinism is supported for identical executable/content builds. The
   floating-point simulation is not guaranteed bit-identical across platforms