> Sort of - my position is that TS should never, new or not, be exposed
> where there are proven means to access the server without exposing the
> TS services.
>
> Sort of like the old HTTP/RPC email access for Outlook that was used for
> years until a worm trashed that method - then all the ASP's that were
> providing Exchange over HTTP were screwed as they scrambled to implement
> VPN solutions (and then later HTTPS methods).
>
> There is just no valid reason to expose the TS service.
>
I am curious how you would view RDP using HTTP as introduced in Windows
Server SP1? Do you believe that the HTTPS solution is comparable to VPN?