borked

thanks pstation - I wouldn't say "at best this is good for preventing from browser plugins". It is a real effort to lock down iOS streams.
This is exactly what I wanted testers for (hence the title). I know what every step entails and where keys are sent. The point is is to make it so darn difficult to rip the stream that it won't be worth it.

Sure, if you have an ass-to-mouth exclusive of David Cameron on Barack Obama , then it's gonna get ripped one way or the other. If you want 100% security, don't put it on the internet ;)

Anyways, I see how you did it and so I can probably close that door...
Additionally, I found a bug in the streaming logic - where the request for the key didn't go through the same checks to verify it was coming from an embedded <video> tag.

If you would like to hit me up on email (see sig), I would like for you to test further once I've modified a few things...

__________________

For coding work - hit me up on andy // borkedcoder // com
(consider figuring out the email as test #1)