Hi,
Can you clarify more about expiration function in Offline mode?
How expiration checking process works? I hope its bullet proof against date manipulation on client? Thank you.
You should be safe.
http://help.remotedesktopmanager.com/index.html?datasource_offline.htm
"The offline mode file is first encrypted using our own private key mixed with some information taken from the local computer. This makes it impossible for a copy on another machine to be readable. By default it is also encrypted with Windows NTFS encryption. In this case, there is no key saved anywhere."
//Brandur
You didn't get the point. I read this docs earlier. I read entire RDM documentation.
Still no answer about time manipulation on client. What happens if expiration is set on 7 days but just before the end user on the client change date & time back?
Imagine situation when user is fired but had access to Offline mode. I have to be sure he will not be able to extend his access to offline data with so simple datetime trick.
This is why I would like to know how it works. When security is involved I like to know technical details instead of general note "you are safe buddy, we promise"
edited by Bin on 7/8/2015
edited by Bin on 7/8/2015
Ok. I understand.
Someone with a deeper knowledge of the workflow process has to answer this.
"...a point" is not intuitive to come across as you might think of it. Especially in writing(across none native English writers)!
If you would have been this specific in the first place, I wouldn't have commented on this thread.
I'm hope someone at Devolutions can help you out, with a more sufficient answer.
//Brandur
Hi,
We check in the offline file is the time was changed. It's not perfect for sure you could have little hole where it will work but the file will be delete as soon it's detected or the it's expire.
I have to be honest with you. There is no perfect solution and if you are not sure if you can take a chance just disable the offline mode for this user.
David Hervieux