.onion with TLS is easy 2do ?  or self-signed SSL just to stop m-i-m sniffing clear text
 

 Https for onion sites does nothing. 

 best way to encrypt to the payload ...