If you have no trusted channel it is impossible to securely communicate. Its a fundmental truth in cryptography. A particular issue is self signed SSL/TLS certificates as unless you monitor that certifcate to make sure it hasn't changed it is simple for someone to do a MITM. Now i'd assume the US government could probably pressure companies like verisign to fake certificate for drug busts which means you probably should trust certificate authorities. Of course they can always go to the end box after the encryption as well. ASIO can put monitoring devices on your, your vehicles and in your home for up to 6 months.