[sliverstorm]

They don't have to take an active role though if they just sniff all the traffic, right?

[cturner]

They won't have access to the temporary keypair that the server generates, and which lives only on the server.

[tptacek]

Yes, they do.

[sliverstorm]

Whoops. This wouldn't be the first time I got public/private key schemes muddled in my head.