What is the main vulnerability of the Diffie-Hellman key exchange protocol?