Get help/Community Ideas and Help/Q&A - iPad/iPhone/iPod touch

Answered

Does Splashtop secure my connection during a remote connection?

Ginolee
asked this on May 19, 2011 08:31

Hi- I use Splashtop to access my computer at home from a remote location. Often times this is through a public wifi hotspot so I am concerned about security. I need to know whether Splashtop encrypts the traffic between my ipad and the remote computer i am accessing or whether some other method is used for securing the connection. I saw another thread where this was asked, but the only response by a Splashtop representative was that due to company policy this could not be answered. I want to be clear that I do not care how or what is used for encryption or what is used to secure my connection. I just want to make sure my connection is indeed secure when I am using a public wifi hotspot. Thanks for answering.
 

Comments

User photo
Sam

Hope support will provide some answers.....

May 20, 2011 11:06
User photo
Sam

One can only assume end to end encryption is not implemented with splashtop. Both logmein and gotomypc openly state SSL end to end encryption.

Splashtop's inability to answer this basic security question suggests security through obscurity.

Until a definitive statement is made on what security measures are used I would not use this product.

May 20, 2011 18:15
User photo
Ginolee
Sam I have to agree with you. Splashtop's non-response is a tacit way of saying that the connection is not actually secure. Better use a VPN or SSH or something like logmein hamachi. SPLASHTOP PLEASE MAKE THE CONNECTION SECURE!
May 20, 2011 20:02
User photo
Jason Hosking

I agree also. Why has it been 10 days and still no answer from Splashtop on this matter?

May 28, 2011 22:29
User photo
MAC

Security issues are so important these days ... but the answers are even more !

June 04, 2011 19:37
User photo
MAC

Splashtop, please provide answers to this request.

June 04, 2011 19:38
User photo
Larry Smith

Very good question. I would like to know the answer also.

July 05, 2011 08:56
User photo
splashtop user

answer this question... rate one star until they do!

July 22, 2011 07:36
User photo
Andy

Security issues are so important these days ... but the answers are even more , need to know!

July 26, 2011 07:53
User photo
A

Holy sheesh. I spent all this time troubleshooting, and it's not encrypted? Support can't be bothered to answer this basic question up or down?

Uninstalled, rating 1 star, buh-bye Splashtop. Recommend all others do the same until Splashtop decides to do the right and smart thing.

August 19, 2011 12:48
User photo
dbach

Doesn't it use the gmail connection?  If so, I would think it would be as secure as the gmail connection.  Therefore you would need to go into your gmail settings and set it to always use https.

August 23, 2011 16:52
User photo
dbach

Well you wouldn't "need to".  The cost of added security would be less performance.  Depending on what you are doing performance might be more important than security.  I suppose one could use wireshark on the PC side to take a look at the data.

August 23, 2011 16:59
User photo
Larry Smith

Who many months will it take to answer this simple question Yes or No?

August 31, 2011 16:44
User photo
Jaff
Splashtop Inc.

Hi all,

Sorry for late response about this security issue.

If you connect within your home network, the streaming is limited locally.

If you connect with your gmail account. Splashtop Remote internet discovery feature creates a channel using the same technology as Google chat. Your key strokes are sent to the remote computer and the remote computers display is sent back. Any applications you run or internet activity is all going through your computer which is on your work network. So, it goes through any firewall your work has set up. We do not do additional encryption at this moment in order to maximize performance. Additional security is something we're planning in the future.

Hope this helps you to manage the risk when you are using Splashtop Remote.

September 01, 2011 02:37
User photo
Peter
Happy connect locally but probably not public WiFi. I would still use with my 3G since it is less open. Thoughts?
September 29, 2011 05:52
User photo
Russell Raff

Hi folks

I REALLY like Splashtop Remote.  But it will remain limited to allowing me to stream desktop content to my HP Touchpad, as I sit ... well, ... somewhere I don't have a TV in the house!!

I would seriously recommend (if I could, I would demand!) some for of SSL-capable interface for remote computers.  For home use, sure, video streaming & everything is nce.  But if I'm logging into one of our servers remotely... darn ight it better be secure!  If the configuration option for this says "SLOW, but SECURE".. who cares?!

You guys at Splashtop have done an awesome job, but I think it's important to balance the use-cases of (a) home/fun use, and (b) work-related/personal ID sensitive-type info.  Thanks again!

      russ

October 03, 2011 22:30
User photo
Peter
How about option to turn on or off the encryption. It is up to the user to decide the security measure.
October 04, 2011 00:16
User photo
Jaff
Splashtop Inc.

@Russell, Peter,

I'd like to show my sincere appreciation on your great inputs, I'll also send your suggestions to our product team to be a reference for future feature design.

October 04, 2011 03:10
User photo
Ginolee
Thanks for answering and passing the need for a secure connection up the chain of command. I use splashtop all the time on all of my computers, but a secure connection either through encryption or some type of secure connection would certainly make your product more robust and useable when away from home.
October 04, 2011 06:58
User photo
Russell Raff

Hey Jaff

Thanks for taking it forward.  Having a secure link (for server management, desktop support/conferencing, etc) would be totally ideal... and would be a totally liberating experience!

      russ

October 04, 2011 09:43
User photo
Dominick Sinicropi

Jaff, thank you for providing a clear answer to this important question.  I came to the support forum with the same question about whether or not Splashtop uses encryption during remote access over the internet.  Since Splashtop does not use any encryption I will stop using it immediately for remote access over the internet. 

I anxiously await future updates to Splashtop that will enable encryption for remote access.

November 07, 2011 19:18
User photo
netmask
Can always run pfsense or another vpn at home and vpn to your house. I have my VPN up at all times in public wifi scenarios and tunnel all traffic through home, also makes splashtop to home less concerning. I still have great performance. Even splashtop over VPN over gogo in flight wifi isn't too bad.
March 29, 2012 14:08
User photo
John Will

Rediculous that they expect you to upgrade to the professional version just to get encryption, like our personal computers security does not matter.  This eas excusable when the product first cam out but after all this time, lack of encryption and reliance on unsecured gmail for remote access is not excusable.  My recommendation is find another product like logmein free which is very secure and has been since day 1.

April 23, 2012 09:47