Html5 video secure streaming?

Question

Does html5 protect streaming video? And by that I mean token authentication. I want to be able to transfer media only to those people who are allowed to view them.

I can do this now with the Flash Media Server hosted by Akamai - they have a custom mechanism in which I send them a token as part of the handshake of connecting to the player. Does html5 allow this, and did anyone implement this with a hosting service like Akamai?

Thanks Matt

Answer 1

Assuming that you mean that users should log in and allow viewing a specific piece of content, then html5 itself will not do this.

One way is to check the server data before serving the video, the easiest of which is a script (php / etc.), Which checks if the user is allowed and then transfers the file to the user.

Answer 2

HTTP Digest is very secure, and you should consider using it in any case over cookies, unless the Slick user interface is very important to you. HTML does not have authentication because it is the role of lower layers such as HTTP.

Answer 3

This is very possible, but it requires integration between your web server and the streaming server (or service). I had adduxis adding this integration in order to provide streaming video for the websites needed to participate. I used the JW player in html5 mode, so I'm not sure about setting up my own html5. You also have additional problems with mobile devices in the advanced settings of HLS (iPhone) and RTMPS (android).

Protection comes from a media server that recognizes a user (IP + UA) as authenticated (with a token request on your server) to make the stream available or not.

Answer 4

You can save a cookie with user authorization, and when the browser requests a video, you check if the user has authorization using php.

Just put the video URL on the .php page that will send the video method, if the user is not logged in, just send the video explaining it.

Answer 5

Theory I: it is possible. But we are talking about the streaming server that you use, what parameters it has for authentication.

As a backup solution, you can always use a (reverse) authentication proxy (Apache is just as good as any) and you only make your stream available through your proxy.