Comment by jabbany

Again, what's the risk that a first time visit to a site is going to give you a fake certificate?

OTOH SSL has done nothing for preventing phishing, since no CAs actually verify anything beyond you owning the domain.