Encryption in itself does little good without a certification authority model. Without a mathematically robust CA chain, you never know if you're sending your encrypted traffic to your intended target or to a man-in-the-middle attacker pretending to be your target. Encryption protects against a passive sniffer but not a party capable of intercepting messages.