Project

General

Profile

Forums » General »

Securing both HTTP and HTSP ports

Added by dreamer538 dreamer538 over 8 years ago

Hi,

I'd like to secure my tvheadend installation that is working over the internet. It seems to be relatively easy to set up a reverse SSL proxy for the 9981 (HTTP) port.

How can I secure HTSP connections? Maybe it's somehow already secured or are the passwords from a client (e.g. kodi) sent in clear text?


Replies (1)

RE: Securing both HTTP and HTSP ports - Added by Dietmar Konermann almost 8 years ago

I was also interested in that... it looks like HTSP uses SHA1 based digest authentication.

So the complete traffic/stream is not encrypted, but the password during authentication . This should be somehow "secure enough", depending on the password complexity. Especially simple replay attacks like with basic authentication are not possible.

Hope I understood it correctly. :D

Best regard
Diddle.

    (1-1/1)