If it works in one way what reason is there to think it won't work the opposite direction? This flaw is in the protocol itself.