PFS (Perfect Forward Secrecy)

RU: PFS (совершенная прямая секретность)

Perfect Forward Secrecy: the same property as forward secrecy — a compromise of the server's long-term private key cannot decrypt past sessions — named PFS in earlier literature. Achieved via ephemeral key exchange (e.g. ECDHE): session keys are derived from short-lived key pairs discarded after the session. TLS 1.3 mandates PFS for all cipher suites.