> An important note here: an active attacker can silently downgrade client connections to turn off PFS. In retrospect, that this is possible seems obvious to m

> An important note here: an active attacker can silently downgrade client connections to turn off PFS. In retrospect, that this is possible seems obvious to me, but it had honestly never occurred to me before. I wonder why this isn't more widely discussed when talking about SSL security?