Navigation

2010/11/23

FilmOn.com encryption - still looking for it

According to this press release FilmOn.com uses encryption.  If by encryption they mean base64, then yes, they use encryption.  A simple wireshark session of the traffic between their desktop client and the mothership reveals that they are streaming h.264 / mp3 inside of an MPEG TS container, unencrypted, over a plain HTTP connection.  The only thing obscure about their streams' URLs are the single parameter, which is a base64 encoded binary string of a format I haven't bothered to determine.  They didn't even bother to wrap it in an SSL connection to obscure the HTTP call!

Nice encryption.