Securing both HTTP and HTSP ports
Added by dreamer538 dreamer538 about 8 years ago
Hi,
I'd like to secure my tvheadend installation that is working over the internet. It seems to be relatively easy to set up a reverse SSL proxy for the 9981 (HTTP) port.
How can I secure HTSP connections? Maybe it's somehow already secured or are the passwords from a client (e.g. kodi) sent in clear text?
Replies (1)
RE: Securing both HTTP and HTSP ports - Added by Dietmar Konermann almost 8 years ago
I was also interested in that... it looks like HTSP uses SHA1 based digest authentication.
So the complete traffic/stream is not encrypted, but the password during authentication . This should be somehow "secure enough", depending on the password complexity. Especially simple replay attacks like with basic authentication are not possible.
Hope I understood it correctly.
Best regard
Diddle.