Even with spoofed DNS, the HTTPS certificates would not match (J. Random Hacker is unlikely to lug around a compromised, trusted root CA certificate, much less

Even with spoofed DNS, the HTTPS certificates would not match (J. Random Hacker is unlikely to lug around a compromised, trusted root CA certificate, much less show it off to a passerby).