Secure Sessions from Weak Secrets (Discussion)