httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Graham Leggett <>
Subject Re: [Patch] mod_crypto: A general purpose crypto filter with HLS support
Date Mon, 01 Dec 2014 15:17:15 GMT
On 01 Dec 2014, at 12:11 PM, Yann Ylavic <> wrote:

> Sorry, I forgot one question :
> - What is the purpose of the handler returning the secret key?
> Get it through a SSL channel for example?
> At first glance it looks quite scary ;)

In HLS, the key is protected via some kind of login mechanism, and is handed out to authorised
people over a secure channel. This handler makes this easy to serve that key, particularly
if the key is derived via the expression API.

The key is provided by a hook, so you could extend the module to support rotating keys and
other enhancements if the expression API isn’t enough.


View raw message