ph00lt0
(Mare Polaris)
30
Most of these things have been previously dicussed and there were also papers written on the security of session messenger earlier.
I would agree there is an issue with the lacking PFS. The arguements for them not needing it are wrong in my opinion.