Would non-EV SSL do anything here? Once you have control over DNS for a domain, you own its mailboxes and can buy SSL certificates validated against that domain. So whether you're connecting to the original site or the new server some government pointed it to, you're getting a valid SSL certificate for that domain.

Yes, but the precedent will be interesting. SSL will become useless and a new decentralized trust system will have to be developed in its place. This will make the Internet even more resistant to censorship and tampering (much like how encrypted Bittorrent stopped greedy or "well-meaning" ISPs from censoring your Linux DVD distribution).

Heh, that would be interesting for sure. I can't imagine any provider that would willfully do that. Once the public/server administrators found out, the provider would be ruined.