Re: rdesktop and MITM (man in the middle)

Good Bad wrote:
>  I heard Windows built-in RDP clients have MITM issue. 
>
> Is rdesktop also vulnerable to MITM?
>
>
>
>   
RDP protocol (regardless of client) suffers MITM because there is no 
exchange of keys to authenticate the sender and the receiver during 
communication.   How I have chosen to resolve this issue is I put a SSH 
server in front of the Windows server.  The client uses an SSH client 
and configures a SSH tunnel from their machine to the Windows server.   
The client machine then directs their RDP client (rdesktop, Remote 
Desktop Connection) to use the locally redirected  SSH tunnel to connect 
to the remote server.

Ken Cobler


-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Don't miss this year's exciting event. There's still time to save $100. 
Use priority code J8TL2D2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone