Which of these statements are correct

In a Forward Secrecy cipher, if attackers are able to access encrypted traffic they will not be able to decode it without the session key, which is discarded after the session ends.

Fingerprinting is only a concern for individuals who are concerned about privacy and is not a security issue.

Browsers will show a warning to users if a website's SSL certificate has expired.

WebAuthn requires users to use a specific hardware device for authentication, such as a USB security key.