The answer is forward secrecy. If an attacker were to record all of a target’s ciphertext traffic over some extended period of time, and then compromise that o

The answer is forward secrecy. If an attacker were to record all of a target’s ciphertext traffic over some extended period of time, and then compromise that one key at any point in the future (perhaps by seizing the device it’s on), they would have the ability to decrypt all of the previously recorded ciphertext traffic belonging to the target. https://whispersystems.org/blog/asynchronous-security/ https://whispersystems.org/blog/asynchronous-security/