The diagram below gives a high-level approach to security. All communication between server and bot can be encrypted using TLS1.2. The same applies to the communication between the browser and webserver.
The following are the key features :