End-to-end TLS for public-domain tunnels, without trusting the relay

TL;DR I built portal-tunnel, expose a local server with a public HTTPS URL, without...