I&#x27;m not suggesting that this makes it acceptable to use in production - but am I right in thinking that you&#x27;d be unable to MITM the connection if the server&#x2F;client both support perfect forward secrecy?