.onion websites don’t need HTTPS because Tor hidden service provides defense against man-in-the-middle attacks.
Yet, it seems that .onion websites without https are not able to persist cookies which makes then unusable.
I have the latest version and tested default install and with:
- Marking as temporary trusted
- Adding the Allow list in Preference-> Content blocking
- HTTPS websites that have a self-signed SSL
In all cases the developers console (press Control + Alt + i) shows that all “storage” was blocked for the website
Request to access cookie or storage on “http://xyz.onion/” was blocked because we are blocking all storage access requests. learn more