It would be nice to catch the parameters of the HTML5 viewer and the report engine. I need to encrypt the parameter Ids that is visible to any man-in-the-middle attacks. I did encrypt the parameters, and tried to use "CustomReportResolver : IReportResolver" to catch and decrypt it before send to the report engine or the report data source. But the resolver has only the report Id or name. I'm using UriReportSource because we need to evaluate and try dynamic reports.