10 ms·
I was curious about the details and did some digging. "Regardless of the transport protocol used (HTTP or HTTPS), PowerShell Remoting always encrypts all commu
by newman314 8y ago
I was curious about the details and did some digging.
"Regardless of the transport protocol used (HTTP or HTTPS), PowerShell Remoting always encrypts all communication after initial authentication with a per-session AES-256 symmetric key."
https://docs.microsoft.com/en-us/powershell/scripting/setup/winrmsecurity?view=powershell-6#encryption-and-transport-protocols https://docs.microsoft.com/en-us/powershell/scripting/setup/...
- genericid 8y agoThen what's the point of using HTTPS? Heating the room?
- jodrellblank 8y agoSee my other comment, but a) it encrypts more of the packets, b) helps with validating correct server, c) encrypts even if you end up authenticating without Kerberos somehow.
- srinathgs 8y agoWhen using HTTP for remoting, headers are not encrypted. But body is always encrypted when using NTLM, CredSSP or Kerberos - the GSSAPI supported protocols. If user doesn't want to use these and opts for basic auth or some other protocol that doesn't have encryption specified, https is useful.