elinks, with strict TLS and DNSSEC.

“Relaxed” TLS is as good as no TLS, when you need to protect privacy.