Re: Secure file download via HTTP

2016-11-04 Thread Mark Waddingham
On 2016-11-04 08:02, Peter Bogdanoff wrote: 1. Am I right that someone could, maybe by a man-in-the-middle process, grab a URL and use that again later? HTTPS prevents man in the middle attacks as long as your client verifies the server side certificate which is sent - i.e. you must not turn o

Secure file download via HTTP

2016-11-04 Thread Peter Bogdanoff
Hi, My application makes extensive use of audio and video in a player control with files accessed from a server via HTTP. There is some concern in my team that in some countries there may be people who will try to access these files outside my application by somehow replicating a URL. So I’m th