.onion domains are encrypted by default so they are secure without https
.onion domains are encrypted by default so they are secure without https