http://www.w5j6stm77zs6652pgsij4awcjeel3eco7kvipheu6mtr623eyyehj4yd.onion/w/index.php?title=Trust&action=edit§ion=27
To mitigate the risk, any OpenPGP fingerprint should be cross-referenced on multiple "secure" (<code>https://</code>) sites. An additional fail-safe is to use an alternative authentication system, for example comparing the Tor signing keys on both the [https://2019.www.torproject.org/docs/signing-keys.html clearnet] and [http://jqyzxhjk6psc6ul5jnfwloamhtyh7si74b4743k2qgpskwwxrzhsxmad.onion/docs/signing-keys.html.en .onion] domains.