public-key encryption in terms of client and server. how to combats public-key encryption vulnerability?