How do you implement your own security on a network channel if the first network request is over http and subject to man in the middle attack? Does ed25519.sig

How do you implement your own security on a network channel if the first network request is over http and subject to man in the middle attack? Does ed25519.sign not work on origins with self signed certs?