I believe than you'd need to trust that the TLS certificate + domain name matches the mint's domain. You've had trusted the mint already when you've minted the ecash.