But what if you get a reply "I am example.com, here's the encrypted socket". How do you know that the entity that replied isn't in fact something that is MiTM you connection?
Along similar lines, I think it's strange that I now see warnings in Chrome for SHA-1 certificates but no warnings at all for http.