Could someone please be kind enough to link me to, or explain to me directly, the information about RDP security.
I'm reviewing making this available for business needs, but I would like peace of mind knowing how it works so I can identify potential threats.
My current assumption is NTLMv2 is used, then an SSL certificate is passed. If this is true or not, I would be interested in some finer points, such as is the SLL certificate passed in an encrypted form (based off the user's password, username or both) or is it subject to Man-In-The-Middle SSL attacks? Etc.
I want to review the security of RDP. Please provide any information available.
Thank you.