Yeah, the "trust" in SSL, per your comments and others, is NOT to
trust them. Instead the user has to go investigate. Yep, wonderful
trust model there.