@clacke @otso @modrobert yeah, indeed. They use SSL over onion not for crypto, but for verification purposes. So it must be HTTPS, and then you must accept the cert.