Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Focus on Microsoft
Under the hood question about Remote Desktop Connection Jan 24 2008 07:19PM
Wozny, Scott (swozny mhtny com) (2 replies)
RE: Under the hood question about Remote Desktop Connection Jan 25 2008 03:04PM
Wayne S. Anderson (wfrazee wynweb net) (1 replies)
RE: Under the hood question about Remote Desktop Connection Jan 27 2008 07:36PM
Miha Pihler (Miha Pihler snt si)
Re: Under the hood question about Remote Desktop Connection Jan 25 2008 08:56AM
Jørgen Hovelsen (jorgen hovelsen ntnu no)
Wozny, Scott wrote:
> Doing some poking around in the list archives and some sites on the net, I
> see how one can require remote connections to use 128-bit RC4 encryption.
> Setting aside the debate on whether or not this algorithm qualifies as
> secure or insecure, this is a symmetric algorithm. As sending the key in
> the clear would be a major faux pas, does anyone know what mechanism this
> app uses to do secure key exchange? Does it just â??borrowâ? a browser cert to
> do a DH exchange?
>

I dont know the reliability of this article, but it seemed be related to
your question:

http://www.oxid.it/downloads/rdp-gbu.pdf

--
Jørgen Hovelsen

[ reply ]







 

Privacy Statement
Copyright 2009, SecurityFocus