Onion addresses are unforgeable and traffic is encrypted. http over .onion is comparable to http over tls.