For a web server, one can purchase a certificate from a CA to provide secure connection (server authentication and data encryption).

But in cases of remote desktop apps like MS Remote Desktop or TeamViewer, how do they establish a secure connection between the remote client and the target PC?

It seems in this case the target PC is a sort of server, so it must have a domain name and a certificate to provide TLS, right? But in most cases it is likely that the target PC does not have a domain name nor a certificate.

Is there any other way to establish a secure connection in this case?


Details may vary but between setups and products. But a common approach is to have a trusted third party (like the product vendor) who mediates the connection. Both endpoints of the remote desktop authenticate themselves against this "master" and also trust this master - and this way the master can mediate a trusted connection between both endpoints. See also this documentation from TeamViewer.

This achieves a similar effect to certificates - establishing a trust relationship with the help of a commonly trusted third party.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.