That's why onions should provide pgp signatures and many do.

In practice it works the same as nostr signing.