Enhancement needed--RTSP stream authentication.

[Doublefire-Chen]

I would be appreciated if the authentication for RTSP stream is added for safety concern. Thank you in advance, bro.

[rzeldent]

Hi Chen,

That indeed would be a nice feature. I'm currently using a library for RTSP and would require a branch. Will keep it in mind!

[alessandrobrugnera]

@Doublefire-Chen I don't think authentication for RTSP will be a good solution for protecting the stream since with tools like wireshark you can pretty much instantly sniff the username and password since they are being sent in plain text. I think the best approach will be to implement SRTP which is the secure version of RT(S)P. Then a username and password will make sense since they will be encrypted and the stream itself will be too.

[Doublefire-Chen]

@Doublefire-Chen I don't think authentication for RTSP will be a good solution for protecting the stream since with tools like wireshark you can pretty much instantly sniff the username and password since they are being sent in plain text. I think the best approach will be to implement SRTP which is the secure version of RT(S)P. Then a username and password will make sense since they will be encrypted and the stream itself will be too.

Yes, you are right. security level: SRTP > RTSP with authentication > RTSP without authentication.