Article: How to secure Apple HTTP Live Streaming (AES-128 - external method)

Hi, I am trying to configure AES128 external method for mobile safari.

I hope someone help me about the manner/way of user authentication on web server which provide key (ie. ASP/PHP/JSP sample, I call this server as “key server” for short).

For mobile safari, I need to use HTML5 video tag as video player (because hls.js do not work on it).

It seems there is no way to add any custom header/cookie to http request from video tag to the key server.

I wonder if there is standard way/manner to differentiate valid user on key server when client is HTML5 video tag.

Please help for this point.

Thanks.