Glossary: Threat Vectors: Files, Networks and Endpoints

forward secrecy

Also written: forward-secret

A property where each session key is made fresh from temporary keys, so it cannot be rebuilt later from the server's long-term private key, and recorded traffic stays locked even if that key is stolen. TLS 1.3 has it built in.