Your second question is harder. I don't know of a better solution than a self-hosted jabber-server with https.
Your second question is harder. I don't know of a better solution than a self-hosted jabber-server with https.