https://labs.portcullis.co.uk/blog/ssl-man-in-the-middle-attacks-on-rdp/
Копипаста:
This post seeks to demonstrate why users learning to ignore those
certificate warnings for SSL-based RDP connection could leave them open
to Man-in-the-middle (MiTM) attacks. The MiTM attack demonstrated
displays keystrokes sent during an RDP session. We conclude with some
advice on how to avoid being the victim of such an attack.