Tor/OnionShare is at this point a better user experience than self-signed certificates.