Score:0

Can we have unencrypted messages in middle of RDP traffic?

sg flag
AHS

I have a pcap containing RDP traffic that uses TLSv1.2 to encrypt the traffic. I noticed that somewhere in the middle of the RDP traffic, specially after sending many encrypted messages between the client and the server, I noticed that suddenly there was a message sent from the client to the server that wasn't encrypted, it is very similar to the first unencrypted message sent in RDP (TPTK message), also Wireshark classified this message as "Ignored unknown record". The RDP server replied to this message also with unencrypted message!! I noticed that after those two messages a new TLS handshake was performed! Any explanation what happened in this traffic? I checked Microsoft specification for RDP protocol, and I didn't find anything that validate this behavior! I read there that at some point when the two sides decided to start TLS, all the traffic will be encrypted from this point... I think that for some reason the server asked the client to re-negotiate, but I can't find anything relevant in the documentation

Jaromanda X avatar
ru flag
could there have been a interruption in the connection
AHS avatar
sg flag
AHS
@JaromandaX do you mean the connection failed for some reason? but the situation I'm talking about happens in the same TCP connection
Jaromanda X avatar
ru flag
oh, OK, so the answer is, there was no interruption in the connection
I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.