Remote Desktop Over Public Wi-Fi?

[Guest]

Is it safe to use Remote Desktop Connection on a public wi-fi network? The
RDC is secure, so no one would be able to see the passwords I'm typing in or
anything like that, right? I ask because I often surf at a cafe with free
wi-fi, but I hesitate to make credit card purchases or even log on to my home
desktop remotely because I don't want anyone snooping my passwords.

 

[Lanwench [MVP - Exchange]]

Is it safe to use Remote Desktop Connection on a public wi-fi
network? The RDC is secure, so no one would be able to see the
passwords I'm typing in or anything like that, right? I ask because
I often surf at a cafe with free wi-fi, but I hesitate to make credit
card purchases or even log on to my home desktop remotely because I
don't want anyone snooping my passwords.

There is no way for you to be 100% sure it's secure. Or us, given that you
don't mention what kind of security they have on the wireless.

 

[Bill Sanderson]

You should assume that someone is looking over your shoulder when using
public access facilities like public wi-fi or hotel network access
arrangements. Turn on the Windows Firewall and set it to "no exceptions."

That keeps folks out of your machine.

Then, make sure that what you do that is sensitive, is done via encrypted
connections. HTTPS, for sensitive web transactions, for example.

RDP is encrypted, including the authentication process. For slightly
improved security, use a VPN connection, ideally an IPSEC VPN, and do the
RDP within the VPN.

However--the RDP by itself is, by default with XP, Windows 2000 SP4, and
Windows Server 2003--encrypted with RC4 encryption with a 128 bit key
strength--the same encryption as a PPTP VPN connection, for example.

 

[Guest]

Sorry, when I said free wifi, that meant there was no encryption whatsoever.
In fact, it's still set at the default lynksis settings.

 

[Guest]

I see. Thank you. I didn't realize that even the authentication was
encrypted. That's good to know.

 

[Lanwench [MVP - Exchange]]

Sorry, when I said free wifi, that meant there was no encryption
whatsoever. In fact, it's still set at the default lynksis settings.

Ugh. I would be very careful using this at all - make sure your machine is
locked down to the gills & firewalled, etc.