Key-establishment and distribution designs leave no opening for man-in-the-middle attacks, for instance by binding the KDH certificate at first communication, and prevent replay through random nonces and time stamps as ANSI TR-34 describes.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.