> Surely anyone who can see the handshake can also decrypt what follows.

No. That's the whole point of SSL/TLS.

http://security.stackexchange.com/questions/6290/how-is-it-p...