That's great if the server that sends the encryption keys is actually the server you think you're talking to.