To answer a complex question: SSL/TLS isn't the problem, the certificates are.