Comment by makomk

12 years ago

It does, assuming you don't have any way to extract the session keys from server RAM - which is kind of the problem here.

I was thinking of the scenario of old traffic being recorded by someone. Unless they also extracted the session key at that time, that traffic should be secure if PFC was enabled even if someone where to extract the server key now.