Secure Connection Via Web Browser

kaplan71 · Post by **kaplan71** » 2005-01-05 14:15

It is great the VNC Server and Viewer programs can be configured with the Windows API Crypto plugin. Is it possible to implement the same type of encrypted connection via web browser with the next upgrade to the application? Thanks.

nerd65536 · Post by **nerd65536** » 2005-01-20 23:47

[topic=648][/topic]
I'm bumping you to the FAQ. DSM plugins add encryption functionality to Ultr@VNC

jasonpassow · Post by **jasonpassow** » 2005-01-25 20:10

The request was for the same encryption through the Java viewer. This person clearly stated the WIndows Crypto API plug in is great but he would like the SAME functionality for the web server. It would be nice if the web server could just make use of the plugin.

Ipsec · Post by **Ipsec** » 2005-01-25 20:23

jasonpassow wrote:The request was for the same encryption through the Java viewer. This person clearly stated the WIndows Crypto API plug in is great but he would like the SAME functionality for the web server. It would be nice if the web server could just make use of the plugin.

agreed on the observation.

and I would love this functionality for the web viewer since then I could technically download my key and plugin module from say... gmail or something anywhere and connect securely back to my network at any time

by specifying the key and the dsm plugin.

But im no programmer so.. heck if I know what has to be done.

Post by **Rudi De Vos** » 2005-01-25 20:25

Don't think it gonna ever be possible.
Java is cross platform, Windows crypto api is MS

It would be a lot easyer to add SSL encryption.

jasonpassow · Post by **jasonpassow** » 2005-01-25 20:27

Is it going to be possible then to disable the Crypto plug-in for the java viewer?

Post by **Rudi De Vos** » 2005-01-25 21:24

My opinion it is not a good idea.

What is the sense for using encryption for the viewer, while someone else make the same connection without.
It also would give some feeling that your server is secure while you have a seond unsecure channel open. You have no way to controle how people connect, some would use the encrypted
viewer, while other pass all keypresses plain over the internet.

The current implementation, without key exchange, is also a second authintication method. Without the key, you can not connect.

The best way would be to implement (future) SSL in server and java viewer.
winvnc 5900 -> viewer
winvnc 443 --> java viewer (one port only)
Possible this would also work with certian proxy's

I'm blocked with the java implementation, no knowlegde.
Server site is less work, and during test we could
add it to some repeater like external app.

ottl05 · Post by **ottl05** » 2005-08-17 11:07

what abaout the SSL with the java-viewer? will it come? or how could I do that?

UltraVNC

Secure Connection Via Web Browser

Secure Connection Via Web Browser

The question

Re: The question

Disalbe API plugin