Suppose an attacker were to log your TLS 1.3 traffic today, then steal the server’s private key in two years’ time. What could they do?
