It takes an awful lot of doublethink to take TLS 1.3, remove forward
secrecy, introduce a deliberate self-MitM capability, and call the
result a “security protocol”. Call me crazy but TLS’s one job is
avoiding decryption by third parties
That review should be written into the specification!
