"every first introduction between a browser and a website is insecure, so that subsequent connections might be less insecure." I think the claim is that this i

"every first introduction between a browser and a website is insecure, so that subsequent connections might be less insecure." I think the claim is that this is already the case. There are certificate signing certificates in the hands of people who should not have them and there's no accounting of who has them (beyond the government mentioned) or what they're doing with them. I don't think this presentation is suggesting deleting all your installed CAs, just monitoring whether things are changing under you and coordinating those observations with others you trust. The coordination certainly goes beyond on the SSH model.