DNSSEC does not provide confidentiality of DNS queries. You would need to put the .onion into the path, like https://tor2web.org/example0123456.onion/stuff.html I'm not seeing any reason you couldn't do this, but it would require significantly more link rewriting inside tor2web. -tom