Using Curiefense for HTTPS traffic over Envoy

[BenAgai]

Hi,
I have a question regarding Curiefense support handling TLS traffic over Envoy.
I didn't know if this question should be opened here or not, so I apologize if it is needed to be opened somewhere else.

Curiefense handles HTTP messages provided by the underlying Envoy proxy.
In order for Curiefense to handle HTTPS messages, it needs the Envoy proxy to perform TLS inspection.

As far as I'm familiar with Envoy, it does not support TLS bumping out of the box in order to
perform TLS inspection (at least not for the first TLS connection made to a domain).
With that being said, is it possible to use Curiefense over Envoy for HTTPS traffic?

Please correct me if I'm wrong, or if I missed anything regarding Curiefense workflow.

Thanks,
Ben Agai.