"In reality all it would take is a few lines of code code to log the user’s original password which allows you to decrypt the private key which in turn allows y

"In reality all it would take is a few lines of code code to log the user’s original password which allows you to decrypt the private key which in turn allows you to receive and send mail as that user as well as access any stored messages." Is this any different to writing a few lines of code to sniff the PreMasterSecret or even just a plain ol' MitM attack?