> [...] I can just whip up a website and use javascript plus websockets/webrtc to implement encrypted chat?

HTTPS relies on centralised authority. It's right there in the name: Certificate Authority.

Tell me, Mr. Anderson, what good is a phone call when you are unable to speak?

chrome --disable-web-security

Here, fixed it for you Mr. Criminal.