Is HTSP encrypted?

brimur brimur

Just wondering if I it would be safe open up the htsp port on my tvheadend server and connect to it from kodi on my phone when travelling. I have tried it successfully and know the connection will use a username and password but will the traffic be easily readable if captured over the internet?

Martin Bednar

Hi,

The protocol itself isn't encrypted. However, the authentication is done by digest (challenge), so your password never travels over the network. Haven't thought about the the resilience against a MITM attack or other attacks though.

Documentation is here : http://tvheadend.org/projects/tvheadend/wiki/Htsp (authentication section).

You could of course create a VPN tunnel, that might be encrypted (depending on your setup)