如何保护通过 Flash 或 HTML5 播放的在线视频？
我想通过身份验证在我的网站中播放视频，以便只有注册用户才能观看。
我的意思是：
- 未注册用户不得访问视频文件。
- 视频文件不得下载（只能在线播放）。
I want to play video in my site with Authentication, so that only registered users can view it.
I mean:
- The video file must not be accessed by unregistered users.
- The video file must not be downloaded (it can be played online only).
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（5）
您可以使用 Flash Media Server 和 Amazon Cloudfront 进行安全流式传输。
注意：Amazon Cloudfront 是付费服务。
You can use Flash Media Server and Amazon Cloudfront for secure streaming.
Note: Amazon cloudfront is paid service.
虽然您可以阻止下载 HTML5 和 Flash 视频的接口，但这并不能保证它不会被盗版。只要看看 YouTube 下载者的绝对数量，您就会明白我的意思。
尽管如此，HTML5 并不是 DRM 的理想选择。 Flash 通过 RTMPE / RTMPS 提供 DRM，但是 破解加密的工具随处可见。 Microsoft Silverlight 是提供 DRM 的第三种技术，但它无法在基于 Linux 的计算机上运行。我从未研究过 Silverlight DRM，但我很确定它也可以被破解。
上述技术均支持认证；在向客户端提供视频之前，您只需检查用户是否已登录。如果视频是从同一服务器提供的，则使用 HTML5 这是最简单的，但也可以通过使用来验证所有其他技术用于向用户提供视频的唯一 URL，然后让视频流服务器联系处理登录的服务器，以检查用户/IP 地址是否有权查看视频流。
总结：如果你重视跨平台兼容性，请选择HTML5并屏蔽右键菜单以防止下载；否则，您可以使用 Flash 或 Silverlight DRM - 但请注意，这些都不是完美的。
Although you can block the interface to download the video in HTML5 and Flash, this is not a guarantee it won't be pirated. Just look at the sheer number of YouTube downloaders out there and you'll see what I mean.
HTML5 isn't the ideal thing for DRM, nonetheless. Flash provides DRM trough RTMPE / RTMPS, but tools to break the encryption are widely available. Microsoft Silverlight is a third technology that provides DRM, but it won't work on Linux-based computers. I've never looked into Silverlight DRM, but I'm pretty sure it can be cracked as well.
All the above-mentioned technologies support authentication; before serving a video to a client, you'll simply have to check the user is logged in. This is the easiest with HTML5 if the video is served from the same server, but it can be verified for all other technologies as well by using a unique URL to serve the video to the user and then have the video streaming server contact the server where logins are handled to check if a user / IP address is authorized to view the video stream.
To summarize: if you value cross-platform compatibility, choose HTML5 and block the right-click menu to prevent downloading; otherwise, you can use either Flash or Silverlight DRM - but be aware that neither of these is perfect either.
没有真正的方法来保护 HTML5 视频。浏览器通常允许您右键单击->下载它。 YouTube 防止这种情况的方法是阻止右键点击的覆盖层......但它远非完美。
W3 bug tracker 上已经有一些有关 DRM 的讨论，但是目前还没有真正的解决方案。那里提到的一种有趣的方法可以是 在这里找到。另请参阅主要帖子< /a>，它提供了一些有趣的见解。
There's no real way to protect HTML5 videos. The browser usually lets you right click -> download it. The way YouTube protected against that is an overlay that blocks right clicks... but its nowhere near perfect.
There has been some discussion about DRM at W3 bug tracker, but there's no real solution (yet). One intesting approach that was mentioned there can be found here. Also see the main post, which provides some interesting insights on that.
使用一些复杂的算法制作自定义视频播放器，用于更改视频流的 URL 并加密流数据，以便只有您的播放器可以查看它。
Make a custom video player with some sophisticated algorithm for changing the URL of the video stream and encrypting the stream data so only your player can view it.
Adobe 的 RTMPE 协议几乎就是为了这个目的而制定的。 Adobe Flash Media Server 产品将动态对您的视频进行转码，以受保护的方式将其传送给您的客户。本质上，它是一个 DRM 解决方案。您的客户将使用 Adobe Flash Player 或 Adobe AIR 来观看视频，在完美的情况下，未经授权的用户将无法查看内容。
当然，DRM 或 RTMPE 能否让行业或用户满意是另一回事。就像是否可以为了盗版内容而破坏系统一样。
Adobes RTMPE protocol was made for pretty much this purpose. Adobe Flash Media Server product will transcode your videos on the fly, delivering it to your clients in a protected manner. Essentially, it is a DRM solution. Your clients will use Adobe Flash Player or Adobe AIR to view the videos, and in a perfect world no unauthorized user will be able to view the content.
Whether DRM or RTMPE works to the industrys or users satisfaction is another matter, of course. As is the case with whether the system can be broken for sake of pirating the content.