> the session key cannot be recovered
Of course it can, but only for that specific session.
Of course it can, but only for that specific session.
You would need to compromise the _ephemeral session key_ which is difficult because it is discarded by both parties when the session is closed.
Compromising the RSA key backing the certificate allows _future_ impersonations of the server, which is a different attack altogether.