-
I think your plugin is really, really good. I am using it to stream protected videos from my Amazon S3 account. My question is how secure is this? I am not too technical, but when I look at the source code generated, I can see the name of my bucket my Access Key ID, but I cannot see the Secret Key. I guess that is okay since the Secret Key is really, really long, but won’t it be better not to reveal any of those? Also, I see in your Changelog under “What’s coming” you have “Amazon S3 secure URLs support”.
So, just wondering how secure the player is? Thanks!
-
-
Hello Tony,
sorry about the delay, I just got back from vacation and other team members had their hands full of other work.
We just forgot to remove the “Amazon S3 secure URLs support” item from “What’s coming”.
Our protection is as secure as Amazon S3 gets. The bucket name has to be in the URL, otherwise it won’t work. We try to set the video file expiry link as low as possible and include a sensible message if the link is expired – unlike just “file not found” found in other video plugins with Amazon S3 secure links support.
Thanks!
Martin
