Doesn't cover perfect forward secrecy (PFS). Without PFS if the server's private key was stolen (e.g. by hacking the server) then all traffic sniffed in the pa

Doesn't cover perfect forward secrecy (PFS). Without PFS if the server's private key was stolen (e.g. by hacking the server) then all traffic sniffed in the past could be decrypted. See: https://en.wikipedia.org/wiki/Forward_secrecy https://en.wikipedia.org/wiki/Forward_secrecy