The encryption (if implemented correctly) is good, but if an intelligence agency has access to a Certificate Authority, or the target of your communications, man-in-the-middle attacks are feasible.

In short, nothing is safe anymore.