A method of establishing a remote control session between a first computing device and a second computing device to enable a graphical user interface of an application executed by a processor of the first computing device to be remotely controlled and viewed on the second computing device, the method implemented on the first computing device and comprising: establishing a connection with a bridging module, the bridging module external to the first computing device; performing an authentication procedure with the bridging module using the connection, wherein performing the authentication procedure comprises at least one of: (i) retrieving a certificate chain associated with the first computing device from storage on the first computing device, signing the certificate chain associated with the first computing device with a private key associated with the first computing device, and transmitting the signed certificate chain to the bridging module for validation by the bridging module, said private key stored in the memory on the first computing device, and (ii) receiving a signed certificate chain associated with the bridging module together with a public key associated with the bridging module, and validating the certificate chain associated with the bridging module using a root certificate stored in memory on the first computing device; establishing a secure communication channel to the bridging module on the connection; receiving, from the bridging module, an authentication request transmitted from the second computing device; in response to receiving the authentication request (i) accessing a projection certificate chain stored in a secure data store of the bridging module using the secure communication channel, wherein the projection certificate chain comprises a certificate chain leading to a projection trust root certificate, wherein the projection trust root certificate is stored on the second computing device, (ii) generating a response including the projection certificate chain, and (iii) instructing, via the secure communication channel, the bridging module to cryptographically sign the response using a private key which is associated with the bridging module and is stored in the secure data store, and in response receiving a signature from the bridging module via the secure communication channel; and transmitting a signed authentication response to the second computing device via the bridging module to establish the remote control session, the signed authentication response comprising (i) the projection certificate chain to be validated using the projection trust root certificate and (ii) the signature. establishing a connection with a bridging module, the bridging module external to the first computing device; performing an authentication procedure with the bridging module using the connection, wherein performing the authentication procedure comprises at least one of: (i) retrieving a certificate chain associated with the first computing device from storage on the first computing device, signing the certificate chain associated with the first computing device with a private key associated with the first computing device, and transmitting the signed certificate chain to the bridging module for validation by the bridging module, said private key stored in the memory on the first computing device, and (ii) receiving a signed certificate chain associated with the bridging module together with a public key associated with the bridging module, and validating the certificate chain associated with the bridging module using a root certificate stored in memory on the first computing device; establishing a secure communication channel to the bridging module on the connection; receiving, from the bridging module, an authentication request transmitted from the second computing device; in response to receiving the authentication request (i) accessing a projection certificate chain stored in a secure data store of the bridging module using the secure communication channel, wherein the projection certificate chain comprises a certificate chain leading to a projection trust root certificate, wherein the projection trust root certificate is stored on the second computing device, (ii) generating a response including the projection certificate chain, and (iii) instructing, via the secure communication channel, the bridging module to cryptographically sign the response using a private key which is associated with the bridging module and is stored in the secure data store, and in response receiving a signature from the bridging module via the secure communication channel; and transmitting a signed authentication response to the second computing device via the bridging module to establish the remote control session, the signed authentication response comprising (i) the projection certificate chain to be validated using the projection trust root certificate and (ii) the signature.