They have to, because many sites don't support any PFS ciphersuites. For instance, banks. https://www.ssllabs.com/ssltest/analyze.html?d=www.bankofamerica.com

They have to, because many sites don't support any PFS ciphersuites. For instance, banks. https://www.ssllabs.com/ssltest/analyze.html?d=www.bankofamerica.com&s=171.161.207.100 https://www.ssllabs.com/ssltest/analyze.html?d=www.bankofame... https://www.ssllabs.com/ssltest/analyze.html?d=chaseonline.chase.com https://www.ssllabs.com/ssltest/analyze.html?d=chaseonline.c... https://www.ssllabs.com/ssltest/analyze.html?d=online.citibank.com https://www.ssllabs.com/ssltest/analyze.html?d=online.citiba... https://www.ssllabs.com/ssltest/analyze.html?d=us.hsbc.com&s=161.113.4.5 https://www.ssllabs.com/ssltest/analyze.html?d=us.hsbc.com&s... https://www.ssllabs.com/ssltest/analyze.html?d=online.wellsfargo.com&s=159.45.2.70 https://www.ssllabs.com/ssltest/analyze.html?d=online.wellsf... Ideally, Microsoft, Google, Apple, and Firefox would gang up and all disable ciphersuites lacking DHE/ECDHE in their current browsers. Short of that, one browser disabling them would be viewed as "broken" and would lose marketshare.