PFS

Perfect forward secrecy means that stealing a server's long-term private key does not let an attacker decrypt previously recorded traffic. It is achieved by deriving each session's keys from ephemeral key exchanges like ECDHE that are thrown away afterward. TLS 1.3 made forward secrecy mandatory for all connections.