>>353
All .onion are secure since you never leave the network. The .onion address itself acts as the website's public key.
We could issue an SSL certificate for the .onion address, too, but it would provide little in the way of additional security for the user. It would only be an additional assurance that nobody has hijacked our keys and has configured an imitation website.
If you really want it then I'll add it to the list of stuff to do, but it will be very low-priority.
Since we don't have bumplocks implemented yet, I'll be removing this thread tomorrow.
In the future you can ask questions that don't need their own thread in the tech support sticky. There was actually a discussion about Tor there just last week which is pertinent.