The onion domain should be fine because tor has it's own encryption/verification scheme built into their DNS. The domain is the public key (a derivative of it)

The onion domain should be fine because tor has it's own encryption/verification scheme built into their DNS. The domain is the public key (a derivative of it) and the private key is used to sign data.