You would have to run your own CA and get everyone to install your root cert on their devices. That what happens already with tech like smart cards and SSL inspection firewalls. It's all about trusting the connection implicitly.