iCloud Keychain. Is it secure?

Source: Using Wireshark to Decode SSL/TLS Packets

I've been working a password authentication problem and the wireshark decrypt works very nicely. The server admin has the private key which is all that wireshark needs.

There is no session-by-session private/public key. All sessions use the public key found in the certificate the server. The public and private keys were paired when the admin generated them. The web server keeps the private key.

I'm partial to PGP local encryption from source code that you locally compile. At least then efforts to insert backdoors are more easily spotted.

Bob Wilson