RDP is the best we have… and at the same time one of the worst kitchen sink protocols I've seen. • Encryption can be completely disabled, forcing plaintext log

RDP is the best we have… and at the same time one of the worst kitchen sink protocols I've seen. • Encryption can be completely disabled, forcing plaintext login – to comply with French government orders at some point in the 90s. It's still implemented in a lot of clients, because why not? • Serial and parallel port forwarding (suddenly, USB over JS doesn't seem that surprising any more…) • SMB share forwarding (complete with 8-byte-name-limit) • SMB printer forwarding (as opposed to parallel port printer forwarding). rdesktop's manpage helpfully states that "Keep in mind that you need a 100% match in the server environment, or the driver will fail." Charming! • PCI device forwarding. Holy mother of DMA attacks! You know, WebRTC doesn't seem too bad…