Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We��ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

HLS Authentication / Authorization #19

Open
Zibbp opened this issue Sep 19, 2020 · 2 comments
Open

HLS Authentication / Authorization #19

Zibbp opened this issue Sep 19, 2020 · 2 comments
Labels
feature request 🛠 New feature or request idea 💡 Brainstorming
Projects
Radium Protect

Comments

@Zibbp
Copy link
Owner

Zibbp commented Sep 19, 2020

Currently the RTMP to HLS setup offers no security meaning anyone is able to download the stream as well. Recently I pushed a new version of the container, RTMP to HLS Encrypted which encrypts the stream (each .ts file) with an AES 128 key, that key is rotated out every 30 seconds. This new container improves on the old one as the stream is encrypted and anyone trying to view the individual .ts files wouldn't be able to play them. However if they got a hold of the .m3u8 playlist they would be able to decrypt the files as the playlist points to where the keys are.

To further harden the security of the HLS stream I'm working on a server that sits on top of the RTMP to HLS Encrypted container. This server would authorize users to be able to access the HLS stream files. Details on how users would be authenticated and authorized are still to come. This would harden access to the HLS stream as unauthenticated users wouldn't be able to access the HLS stream.
@Zibbp Zibbp added feature request 🛠 New feature or request idea 💡 Brainstorming labels Sep 19, 2020
@Zibbp Zibbp mentioned this issue Sep 20, 2020
Closed
@Zibbp Zibbp added this to Done in Radium Protect Sep 23, 2020
@Zibbp
Copy link
Owner Author

Zibbp commented Sep 25, 2020

Groundwork for Radium Protect server can be found at https://github.com/Zibbp/Radium-Protect

It's pretty basic in functionality right now. It supports either the normal RTMP to HLS or the encrypted version at https://github.com/Zibbp/Nginx-RTMP-HLS-Encrypted
@Zibbp
Copy link
Owner Author

Zibbp commented Oct 1, 2020

Basic frontend support was added in update v1.2.1
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature request 🛠 New feature or request idea 💡 Brainstorming
1 participant
@Zibbp