Thanks! Yep, the local connection will tunnel through an HTTPS connect, so it should work from behind aggressive NATs.

The goal of the desktop app is cross-platform. In its current form it's a cobbled together OSX app that shells out, but moving it to Java (or an easier-to-port language) soon.