It is encrypted, but when you&#x27;re going to facebookcorewwwi.onion you only know that you&#x27;re connecting to server that knows the corresponding private key, of which &quot;facebookcorewwwi&quot; is a hash. Which is already good. However, seeing EV certificate on this domain also shows you that the corresponding private key for HTTPS connection is signed by a certificate authority: that is, if you trust this CA, you can pretty much trust that you&#x27;re connecting to Facebook, Inc.