Session lacks forward secrecy, which isn't ideal.