A couple of improvements.

[ghost]

1. Just hidden site? Not secure. Please consider adding "HiddenServiceAuthorizeClient" setting to torrc.
2. Let user to make/apply self-sign 8192bit SSL certificate. I know that Tor-to-Tor packet is already encrypted, but it'll be great if I can set something like "[X] Use paranoid SSL"

A<--->TorRelay1<--..-->TorR3<--->B: Tor-to-tor is weaker than below, right? A<====+========+===========>B: with self-sign long-bit SSL

1. Does the sending/received message/file was encrypted?
2. buddylist file is not encrypted.