I use a VPN provider (tigerVPN) and they use OpenVPN with data channel cipher AES-256-CBC. For authentication, they use username/password and server cert.
I'm assuming that config doesn't support perfect forward secrecy?
Would an attacker be able to decrypt recorded data streams if he is able to obtain username/password? Is this configuration unsafe?