[nly]

Meh. Should every site using HTTPS make it clear that hundreds of CAs whom you've never heard of have the capability to perform a MITM?

At least with MEGA you know the security framework is something they've engineered themselves, so you know you have to trust them. With SSL/TLS you're deferring to authority simply because it's convenient.

[e12e]

You still have to trust SSL, in the case of MEGA, COMODO is their CA, and they appear to use 128bit RC4.

Of course, if you've not cleaned your trusted certificates, someone like CNic can just MTIM you.