# Secure RTSP and HLS/HTTP streaming

**URL:** https://community.wowza.com/t/secure-rtsp-and-hls-http-streaming/35834
**Category:** Wowza Streaming Engine
**Created:** [March 26, 2012, 11:37am UTC](https://community.wowza.com/t/secure-rtsp-and-hls-http-streaming/35834 "2012-03-26T11:37:14Z")
**Posts on this page:** 1
**Showing post:** 9

<div class="post-metadata">

### Author: ![Randall\_Auriemma](https://avatars.discourse-cdn.com/v4/letter/r/85e7bf/32.png) [@Randall\_Auriemma](https://community.wowza.com/u/Randall_Auriemma)
#### Post date: [March 27, 2012, 1:23am UTC](https://community.wowza.com/t/secure-rtsp-and-hls-http-streaming/35834/9 "2012-03-27T01:23:12Z")

</div>

Use a query string instead of a stream name to do your authentication. A user posted an example: [Application exists for RTMP but not RTSP?](http://community.wowza.com/t/-/35112)

On your webserver md5 encode your random salt and their IP and then add the current unix timestamp to the result. On the Wowza module, recalculate hash from their IP + salt, then subtract from key leaving unix time. This will accomplish two things:

1. Ensure the person who requested the URI is the same IP as the one playing it.

2. Provide a time, that you can check/reject.

---

_[View the full topic](https://community.wowza.com/t/secure-rtsp-and-hls-http-streaming/35834)._
