For that kind of end-to-end encryption I use pinggy.io tls tunnels.