Securing both HTTP and HTSP ports

Added by dreamer538 dreamer538 almost 10 years ago

Hi,

I'd like to secure my tvheadend installation that is working over the internet. It seems to be relatively easy to set up a reverse SSL proxy for the 9981 (HTTP) port.

How can I secure HTSP connections? Maybe it's somehow already secured or are the passwords from a client (e.g. kodi) sent in clear text?

Replies (1)

RE: Securing both HTTP and HTSP ports - Added by Dietmar Konermann over 9 years ago

I was also interested in that... it looks like HTSP uses SHA1 based digest authentication.

So the complete traffic/stream is not encrypted, but the password during authentication . This should be somehow "secure enough", depending on the password complexity. Especially simple replay attacks like with basic authentication are not possible.

Hope I understood it correctly. :D

Best regard
Diddle.

(1-1/1)

Project

General

Profile

Tvheadend