Perfect Forward Secrecy (PFS) — Perfect forward secrecy protects past session contents from later compromise of a long-term authentication key. It commonly uses temporary key-establishment material that is not retained after the session. It does not automatically protect future sessions or information exposed through a compromised endpoint.

Added November 6, 2026