QubeOS as a remote cloud virtual Thin Client?

[Lace]

So I saw on the GIT repo on GitHub that some QubesOS devs were hard at work creating a remote login admin feature

Thus I got to thinking after seeing this:
https://forum.qubes-os.org/t/secbrowser-alternatives/3560/73

And then this:

What is Authentic8?

If maybe QubesOS could be used as a “Thin Client” with a similar premise of being a portal that protects the connecting remote user from browser based exploits utilizing not just its VM hypervisor but a web portal to isolate the hardware leaving only the server to deal with handling the “risk” while keeping the user remotely accessing it safe(r) — you know, in case there is a successful exploit that escapes the hypervisor and goes right to dom0 this would then only be a risk to the server using this type of setup, especially if the user at home is using Qubes too on their bare metal

Will it be possible to recreate a similar hardened virtualization remote desktop environment with strict transport policies via a QubesOS “thin client” on a cloud (someone else’s offsite) server now, or not until that remote admin update is included in an upcoming QubesOS release?
Similar to Authentic8
(because Authentic8 only sell to businesses or governments not to everyday users who may require a temporary solution when unluckily under cyber attack by a cyber stalker — plus for a regular user the price is steep and they require a whole year commitment)
Also, I think Authentic8 maybe using Windows as the virtual desktop and possibly then Virtual Box though I am not sure yet. One thing is for sure, their entire onboarding process is using Google products which have been weaponized against me so I don’t even know if it is wise to proceed even if they do accept my LLC as a customer as their entire new customer onboarding relies on things like Google Calendar; but I digress …

Is a “Thin Client” possible to accomplish with placing QubesOS on a remote server and allowing it to facilitate a remote web portal login (not exactly the remote admin feature per se nor a SSH connection but just a HTTPS web portal type of connection — or better yet would be end-to-end Perfect Forward Secret but that is too advanced for me to implement)

Could QubesOS be used for this purpose?

[apparatus]

Qubes-Air? Qubes in the cloud?

Hi I just found Joanna Rutkowska’s blog post Qubes Air: Generalizing the Qubes Architecture where she states that that is the next step for Qubes-OS. The article was written in 2018. So, I wonder whether that’s still the objective; getting Qubes in the cloud? Really?

[barto]

Half of the Cloud-talk is vapourware (pun intended) - and I’m not talking or pointing out QubesOS here. I mean Cloud in general.

[solene]

you could use qubes os with sys-gui-vnc to connect to a remote qubes os running 24/7

[Lace]

Cool thank you for pointing me to the words to query

I am now looking over this:

Help me understand sys-gui-vnc and how to appropriately secure it

Hi everyone, I’ve been considering switching to running sys-gui-vnc since there’s quite often times when I’m away from my primary (qubes) computer and still need to regularly use it. I am well aware that this isn’t an ideal security model, however it’s become a pretty big deal so it’s probably going to be my solution for the foreseeable future. The current plan for my model is in the diagram, however I’m not sure what the best way to connect the remote device and sys-remote is. I’d ideally like…

Appreciated

[MSQLI]

https://www.kasmweb.com/ this is essentially “Qubes light” if I understand correctly.