KirovBvulgaru / google-cast-sdk

Automatically exported from code.google.com/p/google-cast-sdk
0 stars 0 forks source link

insecure media content or self signed certificates #145

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago
What steps will reproduce the problem?
1. load a custom receiver through a https connection
2. play HLS from a http host or https with a self signed certificate

What is the expected output? What do you see instead?
It should somehow be possible to allow insecure content, as we want to provide 
HLS streams from local network resources.
Currently the custom receiver must be loaded from a secure source, so it's not 
possible to load insecure media (or alternatively with a self signed 
certificate)

Original issue reported on code.google.com by marco.da...@gmail.com on 17 Feb 2014 at 1:38

GoogleCodeExporter commented 8 years ago
I guess you are currently doing something for that, because since 2 minutes it 
works, altough I haven't changed anything in my code...

Original comment by marco.da...@gmail.com on 17 Feb 2014 at 2:34

GoogleCodeExporter commented 8 years ago
(1) CORS requirements are enforced
(2) Receiver should be loaded from a secure channel (https) with a valid 
certificate (i.e. no self-signed certificates).

These are the two main requirements and are there by design.

Original comment by anad...@google.com on 17 Feb 2014 at 6:32