No, not really. Server needs to trust that client would reject an invalid or forged certificate. Diffie-Hellman key exchange is still a subject to man-in-the-mi

No, not really. Server needs to trust that client would reject an invalid or forged certificate. Diffie-Hellman key exchange is still a subject to man-in-the-middle attack.