The Fenrir project does something like this. They first establish a encrypted connection and then you can authenticate, or not. The authentication can also be federated.<p>Its pretty cool, but its not production ready.<p>The GNUNet has multible layers and do bottum up encryption on the lower levels.