search

rzeldent / esp32cam-rtsp

Simple RTSP (streaming image) server for the ESP32CAM. Easy configuration and monitoring through the web interface.
660 stars 118 forks source link

Enhancement needed--RTSP stream authentication. #16

Open Doublefire-Chen opened 2 years ago

Doublefire-Chen commented 2 years ago

I would be appreciated if the authentication for RTSP stream is added for safety concern. Thank you in advance, bro.

rzeldent commented 2 years ago

Hi Chen,

That indeed would be a nice feature. I'm currently using a library for RTSP and would require a branch. Will keep it in mind!

alessandrobrugnera commented 1 year ago

@Doublefire-Chen I don't think authentication for RTSP will be a good solution for protecting the stream since with tools like wireshark you can pretty much instantly sniff the username and password since they are being sent in plain text. I think the best approach will be to implement SRTP which is the secure version of RT(S)P. Then a username and password will make sense since they will be encrypted and the stream itself will be too.

Doublefire-Chen commented 1 year ago

@Doublefire-Chen I don't think authentication for RTSP will be a good solution for protecting the stream since with tools like wireshark you can pretty much instantly sniff the username and password since they are being sent in plain text. I think the best approach will be to implement SRTP which is the secure version of RT(S)P. Then a username and password will make sense since they will be encrypted and the stream itself will be too.

Yes, you are right. security level: SRTP > RTSP with authentication > RTSP without authentication.