3 ms·
In the several decades since, nothing has stopped them from coming out with a "RDP v2." I trust SSH to be public-facing. Don't have the right private key? Poun
by KennyBlanken 2y ago
In the several decades since, nothing has stopped them from coming out with a "RDP v2."
I trust SSH to be public-facing. Don't have the right private key? Pound sand. You're not getting in.
I trust RDP to allow someone to break into my machine, get admin privileges, and infect / bot it, likely in under an hour.
Smart cards rolls eyes
- joking 2y agoThat’s why you have an vpn or the rdp gateway instead of exposing the machines directly to internet.
- Nextgrid 2y agoSmart cards is just certificate-based authentication really. Microsoft did indeed fail hard - if they just made certificate authentication easy to configure on stand-alone machines like SSH key authentication is (and allow to keep the key as a file if desired, instead of in a smart card), a lot of pwnage would've been avoided.
- p_ing 2y agoYou can set up RD Gateway to leverage MFA. https://learn.microsoft.com/en-us/entra/identity/authentication/howto-mfa-nps-extension-rdg https://learn.microsoft.com/en-us/entra/identity/authenticat...
- nijave 2y agoIirc you can enable Remote Desktop and block public access and connect over an SSH tunnel. Newer versions of Windows include an SSH server.