Skip to main content
J
johnnytee
Participating Frequently
April 21, 2010
Question

Protecting Live Stream Encoding URL

  • April 21, 2010
  • 2 replies
  • 3204 views

We set up a Flash Media Server and we are trying to figure out how to protect our live encoding url. Seems like anyone with a Flash Media Encoder and who knew the location of our server could publish a live stream. Can we password protect this in any way?

    This topic has been closed for replies.

    2 replies

    J
    johnnyteeAuthor
    Participating Frequently
    April 23, 2010

    Is there a way to disable live streaming and or separate the vod port and the live streaming port? This is pretty big security issue, we're a university and can't have people sending pirated streams through our server.

    Asa_-_FMS
    Adobe Employee
    Asa_-_FMS
    Adobe Employee
    April 26, 2010

    Yes, it's complicated and it shouldn't need to be so -

    1.  Use SWF Verification on your applications as much as possible to prevent external users from taking unexpected actions on your apps.  This means using SWF Verification for your playback players on your live application.

    2. Remove the vod application from your FMS if it's not being used.  If it is, then back to SWF Verification for it.

    3. The encoder becomes the hard part, it's difficult in the current scheme to prevent another encoder from connecting to FMS - but with SWF Verification enabled users won't be able to playback an arbitrary scheme, there's only competition to publish.  For now the recommendation is leave your FMLE encoder publishing as much as possible to prevent the stream name from being co-opted - or potentially bringing the target FMS up only before your intended broadcast.

    Naturally none of these workarounds are good solutions or reflect what Adobe considers acceptable workflows here, hence why we're fixing this.  However, if we're speaking of working in the interrim, I'd recommend these approaches to stop the bleeding.

    Asa

    M
    Michael_Kennedy__12345_
    Inspiring
    April 28, 2010

    Asa,

    Are you able to share details of what the solution being developed by Adobe will involve, and which versions of FMS it will apply to (an update for 3.0, 3.5 or just a feature of 4.0)

    Thanks,

    Michael

    V
    Adobe Employee
    vijay_das
    Adobe Employee
    April 21, 2010

    Check out Flash Media Server Authentication Add-In that is available for download at the same page from where you get Flash Media Live Encoder.

    Also Flash Media Server ships with sample Access and Authorization adaptors that can be used to implement authentication/ authorization on server. You can find the samples in /documentation folder.

    J
    johnnyteeAuthor
    Participating Frequently
    April 21, 2010

    nice thank you!

    A
    Anonymous
    April 21, 2010

    You can also use passwords without the auth addin. See my post on using query variables in this thread :

    http://flashcomguru.com/forum/forum_posts.asp?TID=4551&PN=2

    So you know... if you're using streaming server, neither the auth addin or my method of using query vars will work... you need interactive server.

    Terms & ConditionsAccessibility statement
    Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices