Glossary: Change Records, Cryptography and PKI

perfect forward secrecy

Also written: forward secrecy, PFS

Old recorded sessions can't be decrypted even if the server's long-term private key is stolen later, because ephemeral key exchange made the session keys.