Vanilla browser based https encryption cannot stop states like the US or China which have access to all the major pipes.  All it takes to do a man in the middle on basic https is the key for any <i>one</i> certificate that your browser trusts.  Any organization that has one (including many employers which install certs) can easily watch your traffic.<p>HTTPS is fundamentally insecure against MITM attacks by governments.