Using websockets in Extensions?

Also, if I use TLS, should I still pass the JWT code?