This question already has an answer here:
If I were to add additional encryption inside my HTTPS stream, would I be making worthwhile improvements?
The NSA stores a massive amount of data, perhaps most of it is encrypted and at some later date they may be able to decrypt it.
Generate a private/public key pair on the server, use the public key client side to encrypt the sensitive data and send back to the server over HTTPS.
In the case that the SSL certificate is compromised, the second layer of encryption protects your data.
I am not asking how to do this, I am asking is it worthwhile to do this? Another way of asking this question is:
"If SSL is compromised by the NSA now or in the future, and we know that the NSA is collecting all the internet traffic, is it wise to add another layer of encryption?"