# Article: How to secure Apple HTTP Live Streaming (AES-128 - external method)

**URL:** <https://community.wowza.com/t/article-how-to-secure-apple-http-live-streaming-aes-128-external-method/101>\
**Category:** Wowza Streaming Engine\
**Tags:** media-players-and-devices\
**Created:** [October 1, 2010, 11:37am UTC](https://community.wowza.com/t/article-how-to-secure-apple-http-live-streaming-aes-128-external-method/101 "2010-10-01T11:37:46Z")\
**Posts on this page:** 1\
**Page:** 5

<div class="post-metadata">

**Author:** ![Yasuhiko\_Takano](https://avatars.discourse-cdn.com/v4/letter/y/ac91a4/32.png) [@Yasuhiko\_Takano](https://community.wowza.com/u/Yasuhiko_Takano)\
**Post date:** [July 9, 2018, 9:11am UTC](https://community.wowza.com/t/article-how-to-secure-apple-http-live-streaming-aes-128-external-method/101/81 "2018-07-09T09:11:30Z")

</div>

Hi, I am trying to configure AES128 external method for mobile safari.

I hope someone help me about the manner/way of user authentication on web server which provide key (ie. ASP/PHP/JSP sample, I call this server as “key server” for short).

For mobile safari, I need to use HTML5 video tag as video player (because hls.js do not work on it).

It seems there is no way to add any custom header/cookie to http request from video tag to the key server.

I wonder if there is standard way/manner to differentiate valid user on key server when client is HTML5 video tag.

Please help for this point.

Thanks.

[Previous page](https://community.wowza.com/t/article-how-to-secure-apple-http-live-streaming-aes-128-external-method/101.md?page=4)