There is an issue with a MITM recording SSL sessions, then decrypting them later. Lots of sites that don’t have things like forward secrecy properly configured and that allow weaker ciphers. Having said that, the article seems to be trying to reinvent the Secure Remote Password protocol (the article is old). https://en.wikipedia.org/wiki/Secure_Remote_Password_protocol