Comment by jolmg

It doesn't matter if it's not. Security should depend completely on the clients. Public-key crypto allows private communication through insecure channels.