SSL does not protect against a variety of attacks, among them: * breach via a compromised (guessed) password * breach via a security issue in the service and/o

SSL does not protect against a variety of attacks, among them: * breach via a compromised (guessed) password * breach via a security issue in the service and/or the host Hosting your own service may make sense depending on your knowledge and/or threat model, but it's not a silver bullet that solves all issues. Hosting on a .onion address buys you exactly nothing in terms of security - and in the case of a company/team chat server probably not even in terms of privacy.