> Reading this, it seems to imply that key exchange in TLS is an insecure process. The key exchange in itself is an insecure process that may be attacked with

> Reading this, it seems to imply that key exchange in TLS is an insecure process. The key exchange in itself is an insecure process that may be attacked with a man in the middle attack. However, this is a known limitation of the key exchange protocol which is fixed by adding a public key signature to the key exchange messages so TLS is not vulnerable overall. </oversimplification>