This hole allows server (or somebody who can control connection between client and server) to read "encrypted" messages between clients.