RE: TS/3389 risk on Internet

[<sk3tch () sk3tch net>]

Lennert Sorth:
> Well, its certainly sent unencrypted, if not clear text.

False, false, false!
 
Please educate yourself before posting.
 
Windows 2000:
http://www.microsoft.com/windows2000/techinfo/howitworks/terminal/rdpfan
dp.asp
 
Default configuration is 56-bit, you can set this to 128-bit.
 
Windows XP:
http://www.microsoft.com/windowsxp/using/mobility/default.mspx
 
Default configuration is 128-bit
 
Windows Server 2003
http://www.microsoft.com/windowsserver2003/technologies/terminalservices
/default.mspx
 
Default configuration is 128-bit, and there is FIPS-encryption level
available (for even more security)
 
The encryption level can be configured on the server.
 
> From the RDP-Tcp Properties on Windows 2000 Advanced Server:
 
"Encryption level:  Medium
 
All data sent between the client and the server is protected by
encryption based on the server's standard key strength"
 
That is the default setting!