Someone that intercepts the traffic act as a proxy and will just PFS with the client and the server.<p>Confidentiality should be ensured by PFS if the attacker is only sniffing. But so many scenarios where even an unsophisticaded attacker can do more that is is not worth thinking about.