+1 coinfor reading to the end
+1
Home / Glossary / PFS
Glossary · Security

PFS

Perfect Forward Secrecy

In plain language

A property of secure connections where a fresh key is used for each session, so old recordings cannot be unlocked later.

The metaphor

Like a new padlock for every conversation that is thrown away afterwards.

Going deeper

How it works

  • Each session uses a temporary key.
  • Stealing the server's long-term key later does not unlock past sessions.
  • Modern HTTPS and VPNs offer it.
  • It protects against recorded traffic being decoded years afterwards.
In practice
  • A browser connection uses temporary keys.
  • A security scan checks that a web server supports it.
  • A VPN is set to use it.

A question owners ask

Do I need to ask for it?

If a scan says it is missing on your website or VPN, ask your provider to turn it on.

Related terms
AAAAuthentication, Authorization, and AccountingAccount takeoverACLAccess Control ListAdmin accountAESAdvanced Encryption StandardAES-256Advanced Encryption Standards 256-bitAISAutomated Indicator SharingAPTAdvanced Persistent Threat

Something here sounds like your problem?

Every WILDCARD card exists to solve one named problem. Find yours.

Pick your problem →