Can PFS prevent decryption if a server is compromised?
Yes, with PFS, an attacker must obtain both the live session key and private key to decrypt data. Compromising the server does not expose past communications.