0
Windows offers the option of using either RDP encryption or SSL (TLS 1.0) to secure a remote desktop connection. Which option is more secure?
Given the recent discoveries, is TLS 1.0 still secure in this use case?
This is the description Microsoft provides
RDP: The RDP method uses native RDP encryption to secure communications between the client and RD Session Host server. If you select this setting, the RD Session Host server is not authenticated.
SSL (TLS 1.0): The SSL method requires the use of TLS 1.0 to authenticate the RD Session Host server. If TLS is not supported, the connection fails.
UPDATE: I'm referring to the POODLE vulnerability discovered recently that TLS 1.0 is no longer secure
You have a misconception, POODLE does make TLS not secure. What it does is make the connection fail then your browser tries a older method to connect. It only demonstrates the dangers of allowing legacy SSL 3.0 connections. – Scott Chamberlain – 2015-02-26T22:03:31.133