Here&#x27;s some of the options:<p>Client generates a key, encrypts with server&#x27;s RSA key, sends it to the server, and the session starts. This lacks PFS.<p>Client and server participates in DH key exchange, the server signs their DH parameters using the RSA key so that the client knows that he&#x27;s talking to the right person. They now start the session using that DH generated key. This has PFS.<p>And there&#x27;s same as the above but with DH replaced with elliptic curve DH (different way of achieving the same thing), and RSA replaced with ECDSA, and a few other options.