Hacker News Reader

You should look into how perfect forward secrecy works in TLS before you make these kinds of claims.

[1] http://vincent.bernat.im/en/blog/2011-ssl-perfect-forward-se...

If someone has your private cert and keys, that is irrelevant - they can fully MITM you. Forward secrecy only ensures that a compromised key doesn't compromise data collected in the past.

Reply on news.ycombinator.com