Possibility to use DSM plugin or not at connection setup

amedina · Post by **amedina** » 2006-03-15 01:35

Hi.

I use the DSM encryption plugin to connect to my computer at the office from my house and viceversa. However there are times when I'm not at any of these two computers and I want to access one of them. In this case I would like to deactivate the encryption and use an unsecured channel.

There are many reasons for which I would like to deactivate it.
1. I am using a computer with VNC installed, but in that case I would have to maintain the key with me.
2. If I am at a computer where the viewer is not installed and I want to use the java viewer.
3. I am using my palm, for which the vnc client is not DSM enabled.

On the other hand I wouldn't like to deactivate the encryption, because sometimes I transfer sensitive data and I am not confortable sending it through and unsecured channel.

My suggestion or (my question if it already is possible), is that at connection setup, the user could choose if it wants to use encryption or not.

Do you think of other workarrounds to my problem. I do not want to install VPNs.

Thank you.

scovel · Post by **scovel** » 2006-03-28 23:43

Encryption is all or nothing in UltraVNC. Since the whole stream is encrypted, including the initial handshake, there is no possibility to prompt the user. Better to have it always on.

If Sam decides to change the DSM architecture then it might be possible, but at this point its all or nothing.

Sean

evank · Post by **evank** » 2006-05-23 14:41

due to the nature of the encrypted connection ultravnc uses (as scovel pointed out), even the initial negotiation of the connenction is encrypted.

the best way to accomodate your needs would be to carry a thumbdrive with you containing your encryption key. i know many system admins who do just this, carrying a thumbdrive (that is sometimes itself encrypted) containing client certificates, public keys, and the like.