SSVNC is a free and open source package that provides a GUI for Mac OS X that automatically starts up an STUNNEL SSL tunnel for SSL or ssh for SSH connections to x11vnc or any other VNC server. Then it launches the VNC Viewer to use the encrypted tunnel. The provided unix viewer, ssvncviewer, has many enhancements over regular viewers.NOTE: SSVNC is licensed and distributed under the terms of the BSD License and GNU General Public License (GPL).What\'s New in This Release: [ read full changelog ]· SSVNC\'s SSL encryption is extended to support the VeNCrypt and TLS (older; vino) SSL/TLS security type extensions to VNC. These modes work for both forward and reverse connections.· SSL Certificate Revocation Lists are supported.· In regular SSL mode (i.e. vncs://) Anonymous Diffie Hellman (encryption but no certificate authentication) is now supported.· The CUPS print tunnelling is now much improved; the default settings should work for most setups (let us know if it doesn\'t.)· The Windows helper programs are updated to most recent versions. Updated stunnel source to version 4.26 for Unix.· Default certificates and keys can be set via the command line -mycert, -cacert, and -crl or their ~/.ssvncrc equivalents.· The -unixpw username+password mode can be used with the VeNCrypt *Plain authentication methods.· On MacOS X, the supplied enhanced Unix X11 vncviewer is now the default instead of Chicken of the VNC. See SSVNC_COTVNC. and cotvnc=1 ~/.ssvncrc settings.· On Windows killstunnel mode is now the default.· On Unix/MacOSX SSH Local Port Protections is now on by default.· When client-side scaling is enabled, the VNC encoding is switched from TightVNC to ZRLE because the latter is much faster (~4X) because it draws less to the viewer screen.· Documentation warns about existing Man-In-The-Middle tools like dsniff/webmitm and cain. Stunnel messages are documented better.· One can now specify a single reverse connection with the \'Listen Once\' option. For Unix/MacOSX only.· Improved ssh pid detection for ss_vncviewer wrapper.· It is possible, but still awkward, to Fetch a Cert in Reverse connection mode (server must do an connect and reconnect). For Unix/MacOSX only.· On MacOS X \'127.0.0.1\' is used instead of \'localhost\' to work around problems where it is not resolved.· Support for RFB 3.8 protocol.