Comment by speedplane

You have to trust someone, at some point. HTTPS/SSL relies on a distributed trust system. Even with crypto, you have to trust the developers that created the protocol and the consortium of groups that operate it.