> Unfortunately, we're "as safe as SSL" no matter what, unless the source has a separate way to verify the .onion address on the SSL-protected page.
Print it in the physical newspaper. The German computer magazine c't prints their PGP key fingerprints in the masthead.
