Transport Layer Security

TLS helps ensure that most web-based encrypted communication cannot be easily decrypted using just the server's private key, because only a portion of the session key actually gets transmitted through the network. In addition, the session key is periodically renewed between client and server. Because of this, all the session keys would be needed to decrypt traffic in the event of a private-key compromise. The latest version (1.3) of TLS also contains only cipher suites that support Forward Secrecy.

Relevant Note(s):