the SSL would have to stop in the EC2 instance where the bulk of the 'browser' is. Its then up to the Silk infrastructure to ensure the transmissions from the Fire to EC2 would be secure as well.