Does Splashtop secure my connection during a remote connection?
Ginolee
asked this on May 19, 2011 08:31
Hi-
I use Splashtop to access my computer at home from a remote location. Often times this is through a public wifi hotspot so I am concerned about security.
I need to know whether Splashtop encrypts the traffic between my ipad and the remote computer i am accessing or whether some other method is used for securing the connection.
I saw another thread where this was asked, but the only response by a Splashtop representative was that due to company policy this could not be answered. I want to be clear that I do not care how or what is used for encryption or what is used to secure my connection. I just want to make sure my connection is indeed secure when I am using a public wifi hotspot.
Thanks for answering.
Comments
Sam
Hope support will provide some answers.....
May 20, 2011 11:06
Sam
One can only assume end to end encryption is not implemented with splashtop. Both logmein and gotomypc openly state SSL end to end encryption.
Splashtop's inability to answer this basic security question suggests security through obscurity.
Until a definitive statement is made on what security measures are used I would not use this product.
May 20, 2011 18:15
Ginolee
Sam I have to agree with you. Splashtop's non-response is a tacit way of saying that the connection is not actually secure. Better use a VPN or SSH or something like logmein hamachi. SPLASHTOP PLEASE MAKE THE CONNECTION SECURE!
May 20, 2011 20:02
Jason Hosking
I agree also. Why has it been 10 days and still no answer from Splashtop on this matter?
Splashtop, please provide answers to this request.
June 04, 2011 19:38
Larry Smith
Very good question. I would like to know the answer also.
July 05, 2011 08:56
splashtop user
answer this question... rate one star until they do!
July 22, 2011 07:36
Andy
Security issuesare soimportantthese days...but theanswersare evenmore , need to know!
July 26, 2011 07:53
A
Holy sheesh. I spent all this time troubleshooting, and it's not encrypted? Support can't be bothered to answer this basic question up or down?
Uninstalled, rating 1 star, buh-bye Splashtop. Recommend all others do the same until Splashtop decides to do the right and smart thing.
August 19, 2011 12:48
dbach
Doesn't it use the gmail connection? If so, I would think it would be as secure as the gmail connection. Therefore you would need to go into your gmail settings and set it to always use https.
August 23, 2011 16:52
dbach
Well you wouldn't "need to". The cost of added security would be less performance. Depending on what you are doing performance might be more important than security. I suppose one could use wireshark on the PC side to take a look at the data.
August 23, 2011 16:59
Larry Smith
Who many months will it take to answer this simple question Yes or No?
August 31, 2011 16:44
Jaff
Splashtop Inc.
Hi all,
Sorry for late response about this security issue.
If you connect within your home network, the streaming is limited locally.
If you connect with your gmail account. Splashtop Remote internet discovery feature creates a channel using the same technology as Google chat. Your key strokes are sent to the remote computer and the remote computers display is sent back. Any applications you run or internet activity is all going through your computer which is on your work network. So, it goes through any firewall your work has set up. We do not do additional encryption at this moment in order to maximize performance. Additional security is something we're planning in the future.
Hope this helps you to manage the risk when you are using Splashtop Remote.
September 01, 2011 02:37
Peter
Happy connect locally but probably not public WiFi.
I would still use with my 3G since it is less open.
Thoughts?
September 29, 2011 05:52
Russell Raff
Hi folks
I REALLY like Splashtop Remote. But it will remain limited to allowing me to stream desktop content to my HP Touchpad, as I sit ... well, ... somewhere I don't have a TV in the house!!
I would seriously recommend (if I could, I would demand!) some for of SSL-capable interface for remote computers. For home use, sure, video streaming & everything is nce. But if I'm logging into one of our servers remotely... darn ight it better be secure! If the configuration option for this says "SLOW, but SECURE".. who cares?!
You guys at Splashtop have done an awesome job, but I think it's important to balance the use-cases of (a) home/fun use, and (b) work-related/personal ID sensitive-type info. Thanks again!
russ
October 03, 2011 22:30
Peter
How about option to turn on or off the encryption. It is up to the user to decide the security measure.
October 04, 2011 00:16
Jaff
Splashtop Inc.
@Russell, Peter,
I'd like to show my sincere appreciation on your great inputs, I'll also send your suggestions to our product team to be a reference for future feature design.
October 04, 2011 03:10
Ginolee
Thanks for answering and passing the need for a secure connection up the chain of command. I use splashtop all the time on all of my computers, but a secure connection either through encryption or some type of secure connection would certainly make your product more robust and useable when away from home.
October 04, 2011 06:58
Russell Raff
Hey Jaff
Thanks for taking it forward. Having a secure link (for server management, desktop support/conferencing, etc) would be totally ideal... and would be a totally liberating experience!
russ
October 04, 2011 09:43
Dominick Sinicropi
Jaff, thank you for providing a clear answer to this important question. I came to the support forum with the same question about whether or not Splashtop uses encryption during remote access over the internet. Since Splashtop does not use any encryption I will stop using it immediately for remote access over the internet.
I anxiously await future updates to Splashtop that will enable encryption for remote access.
November 07, 2011 19:18
netmask
Can always run pfsense or another vpn at home and vpn to your house. I have my VPN up at all times in public wifi scenarios and tunnel all traffic through home, also makes splashtop to home less concerning. I still have great performance. Even splashtop over VPN over gogo in flight wifi isn't too bad.
March 29, 2012 14:08
John Will
Rediculous that they expect you to upgrade to the professional version just to get encryption, like our personal computers security does not matter. This eas excusable when the product first cam out but after all this time, lack of encryption and reliance on unsecured gmail for remote access is not excusable. My recommendation is find another product like logmein free which is very secure and has been since day 1.
Comments
Hope support will provide some answers.....
One can only assume end to end encryption is not implemented with splashtop. Both logmein and gotomypc openly state SSL end to end encryption.
Splashtop's inability to answer this basic security question suggests security through obscurity.
Until a definitive statement is made on what security measures are used I would not use this product.
I agree also. Why has it been 10 days and still no answer from Splashtop on this matter?
Security issues are so important these days ... but the answers are even more !
Splashtop, please provide answers to this request.
Very good question. I would like to know the answer also.
answer this question... rate one star until they do!
Security issues are so important these days ... but the answers are even more , need to know!
Holy sheesh. I spent all this time troubleshooting, and it's not encrypted? Support can't be bothered to answer this basic question up or down?
Uninstalled, rating 1 star, buh-bye Splashtop. Recommend all others do the same until Splashtop decides to do the right and smart thing.
Doesn't it use the gmail connection? If so, I would think it would be as secure as the gmail connection. Therefore you would need to go into your gmail settings and set it to always use https.
Well you wouldn't "need to". The cost of added security would be less performance. Depending on what you are doing performance might be more important than security. I suppose one could use wireshark on the PC side to take a look at the data.
Who many months will it take to answer this simple question Yes or No?
Hi all,
Sorry for late response about this security issue.
If you connect within your home network, the streaming is limited locally.
If you connect with your gmail account. Splashtop Remote internet discovery feature creates a channel using the same technology as Google chat. Your key strokes are sent to the remote computer and the remote computers display is sent back. Any applications you run or internet activity is all going through your computer which is on your work network. So, it goes through any firewall your work has set up. We do not do additional encryption at this moment in order to maximize performance. Additional security is something we're planning in the future.
Hope this helps you to manage the risk when you are using Splashtop Remote.
Hi folks
I REALLY like Splashtop Remote. But it will remain limited to allowing me to stream desktop content to my HP Touchpad, as I sit ... well, ... somewhere I don't have a TV in the house!!
I would seriously recommend (if I could, I would demand!) some for of SSL-capable interface for remote computers. For home use, sure, video streaming & everything is nce. But if I'm logging into one of our servers remotely... darn ight it better be secure! If the configuration option for this says "SLOW, but SECURE".. who cares?!
You guys at Splashtop have done an awesome job, but I think it's important to balance the use-cases of (a) home/fun use, and (b) work-related/personal ID sensitive-type info. Thanks again!
russ
@Russell, Peter,
I'd like to show my sincere appreciation on your great inputs, I'll also send your suggestions to our product team to be a reference for future feature design.
Hey Jaff
Thanks for taking it forward. Having a secure link (for server management, desktop support/conferencing, etc) would be totally ideal... and would be a totally liberating experience!
russ
Jaff, thank you for providing a clear answer to this important question. I came to the support forum with the same question about whether or not Splashtop uses encryption during remote access over the internet. Since Splashtop does not use any encryption I will stop using it immediately for remote access over the internet.
I anxiously await future updates to Splashtop that will enable encryption for remote access.
Rediculous that they expect you to upgrade to the professional version just to get encryption, like our personal computers security does not matter. This eas excusable when the product first cam out but after all this time, lack of encryption and reliance on unsecured gmail for remote access is not excusable. My recommendation is find another product like logmein free which is very secure and has been since day 1.