5 ms·
While I was in China, I remoted back to my home computer through a remote desktop session to check email. I also tunneled my RDP session through an SSH proxy.
by ronnier 17y ago
While I was in China, I remoted back to my home computer through a remote desktop session to check email. I also tunneled my RDP session through an SSH proxy. Hopefully that was secure enough. I also changed my passwords once I returned home.
- deleted 17y ago[deleted]
- onedognight 17y agoOnce you have the host key for the site you are connecting to on your laptop SSH is not vulnerable to a MITM attack in the same way that browsers are with their huge CA list. Of course, pay attention to the warnings about changed host keys.
- swolchok 17y agoPatently false. If users submit to the login URL through a link that was sent in the clear, a MITM can just run sslstrip (http://www.thoughtcrime.org/software/sslstrip/ http://www.thoughtcrime.org/software/sslstrip/) and presto, you're visiting the HTTP version of the page instead of HTTPS. The login URL needs to be unavailable over HTTP, as does the login form.