SSL and first step of handshaking
If we assume that DNS (DNSSEC) and IP (BGP) are well behaved, deployed and used correctly then so far so good. You should be reaching the intended server.

If however there is an adversary between you and this server, then they may interfere with the TLS handshake, including but not limited to altering the chosen ciphersuites and public keys. Any alterations are detectable when we pass the certificate verification, key exchange and authentication steps. However if the client doesn't do all the correct verifications, they may be vulnerable to Moxie's sslstrip tool, which performs various attacks.