# Wowza StreamLock AddOn for HTTPS

**URL:** <https://community.wowza.com/t/wowza-streamlock-addon-for-https/34799>\
**Category:** Wowza Streaming Engine\
**Created:** [November 13, 2012, 9:10am UTC](https://community.wowza.com/t/wowza-streamlock-addon-for-https/34799 "2012-11-13T09:10:27Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![bob\_ka](https://avatars.discourse-cdn.com/v4/letter/b/a8b319/32.png) [@bob\_ka](https://community.wowza.com/u/bob_ka)\
**Post date:** [November 13, 2012, 9:10am UTC](https://community.wowza.com/t/wowza-streamlock-addon-for-https/34799/1 "2012-11-13T09:10:27Z")

</div>

Wowza StreamLock AddOn—Wowza StreamLock AddOn provides near-instant provisioning of free 256-bit SSL certificates and greatly simplifies deploying the proven security of SSL to wrap your RTMP session using RTMPS. StreamLock-provisioned certificates provide the best security when used with RTMP, **but they can also be used for secure HTTP streaming (HTTPS).**

are the extra steps to secure HTTPS or enabling this add-on will do automatically?

---

<div class="post-metadata">

**Author:** ![bob\_ka](https://avatars.discourse-cdn.com/v4/letter/b/a8b319/32.png) [@bob\_ka](https://community.wowza.com/u/bob_ka)\
**Post date:** [November 14, 2012, 6:20am UTC](https://community.wowza.com/t/wowza-streamlock-addon-for-https/34799/2 "2012-11-14T06:20:37Z")

</div>

simple question? is HTTPS this for Apple HLS and is it need if we already encrypt HLS

---

<div class="post-metadata">

**Author:** ![Richard\_Lanham](https://avatars.discourse-cdn.com/v4/letter/r/c68b51/32.png) [@Richard\_Lanham](https://community.wowza.com/u/Richard_Lanham)\
**Post date:** [November 14, 2012, 2:27pm UTC](https://community.wowza.com/t/wowza-streamlock-addon-for-https/34799/3 "2012-11-14T14:27:01Z")

</div>

It can be used with HLS but is not necessary if you are already encrypting.

Richard

---

<div class="post-metadata">

**Author:** ![Richard\_Lanham](https://avatars.discourse-cdn.com/v4/letter/r/c68b51/32.png) [@Richard\_Lanham](https://community.wowza.com/u/Richard_Lanham)\
**Post date:** [November 20, 2012, 8:09pm UTC](https://community.wowza.com/t/wowza-streamlock-addon-for-https/34799/4 "2012-11-20T20:09:20Z")

</div>

I don’t have an authoritative comparison. Varied choices and implementations are good overall for everyone.

Richard

---

<div class="post-metadata">

**Author:** ![Vladimir\_Volovich](https://avatars.discourse-cdn.com/v4/letter/v/ecae2f/32.png) [@Vladimir\_Volovich](https://community.wowza.com/u/Vladimir_Volovich)\
**Post date:** [November 19, 2012, 2:57pm UTC](https://community.wowza.com/t/wowza-streamlock-addon-for-https/34799/5 "2012-11-19T14:57:14Z")

</div>

> It can be used with HLS but is not necessary if you are already encrypting.

Is there any advantage or disadvantage of using StreamLock (or more generally HTTPS with any certificate) to protect HLS stream, compared to securing HTTP Live Streaming with AES-128 encryption, using method described at [https://www.wowza.com/docs/how-to-use-the-internal-method-of-aes-128-encryption-to-secure-live-or-vod-streams-sent-to-apple-ios-devices-moduleencryptionhandlercupertinostreaming](https://www.wowza.com/docs/how-to-use-the-internal-method-of-aes-128-encryption-to-secure-live-or-vod-streams-sent-to-apple-ios-devices-moduleencryptionhandlercupertinostreaming) ?

AES-128 requires an extra HTTP(S) call to get the decryption key, so it may be a bit slower (though HTTPS handshake could be as slow as making an extra call).

But are there any considerations which favor either one of these 2 methods from security perspective? Which one is more secure?