  <varlistentry>
  <term><emphasis remap='B'>pfs</emphasis></term>
  <listitem>
<para>whether Perfect Forward Secrecy of keys is desired on the connection's
keying channel
(with PFS, penetration of the key-exchange protocol
does not compromise keys negotiated earlier);
Since there is no reason to ever refuse PFS, Libreswan will allow a connection defined with
<emphasis remap='B'>pfs=no</emphasis> to use PFS anyway.
Acceptable values are
<emphasis remap='B'>yes</emphasis>
(the default)
and
<emphasis remap='B'>no</emphasis>.</para>
  </listitem>
  </varlistentry>

