Crypto can never work on top of WASM. So these need to be system APIs.

Red Hat is already working on this. See the effort here: https://github.com/enarx/tlssock

We will be renaming this project shortly to cover the fact that we plan to support TLS, GSSAPI and (hopefully in the future) QUIC.