question about streaming video
 

OK I have streaming video working, now I have tried to secure it for members only

Im using Wowza if that matters


The members area uses html authorization with strong box

I have put the player behind the members areas as well as the streams

I have set wowza to only accept calls from www.mysite.com

Is this secure?

what about spoofing the URL? is that possible with strongbox installed? If so I can go to secure tokens I think to make that impossible

anyone see any holes in this?

Thanks In advance

Good questions. BUMP for answers.

I would like to know more about this too as we are just setting up Wowza as well.

I'm pretty sure that your stuff can be stolen right now with Replay Media. I worked on securing my content with streaming for a long while. And the final piece of the puzzle was provided to me by Stickyfingers

He definitely knows how to help you get that secured Mike. I would suggest you talk with him and pay him to take care of it for you. It requires multiple layers of security scripted in to stop all the different ways to sniff out your vids and steal them.

I believe implementing the secure tokens thing with Wowza can secure your streams.

It won't stop the members from downloading that stream. ReplayMedia will steal that every time

see thats the problem I am having, the guys at wowza give me coding examples from a version of wowza that is over a year old. There is no application front end to do stuff that should be simple and the guys at the hosting company dont appear to knmow any more about it than Ido

I coulda got Red5 for free and learned it myself instead of paying to do the same with wowza

Im prolly gonna cancel the wowza license and revert to html streaming until someone gets a mature product out

i can live with members downloading the stream but not non members

Robbie says stickyfingerz has a solution that works

wowza license if i recall is very reasonably priced

The flash player will be connecting over RTMP. There is no referrer tag sent so you can't just accept traffic from that site. Usually people do something like setting a shared object based off some proprietary hash (IP + time) and then check to see if it is valid before serving content.

thats what secure tokens is supposed to do but I cant find a resource to tell me how to do it.

Im not big on wowza right now bwcause of lack of support, plain and simple...this stuff should be built in not coded in by me