RTMP secure?

FongJeng Kum

Hi,

I am using VLC player on my PC to access to RTMP stream of my IPC. Can I find out from you, is this secure?
Cuz the URI that I use is of following:

rtmp://ipcaddr/bcs/channel0_ext.bcs?channel=0&stream=2&user=admin&password=plainpassword

Is the "password" field able to be seen if someone uses WireShark or some monitoring software to see it?
Or is this encrypted?

Bob

We think the password could be leaked this way. So it's advised to use Web client for locally accessing the camera. And it will be encrypted with https.
If the camera is being used to monitor something not too private, it's okay. But when it comes to monitoring indoors area, it's better not to use that rtmp url with VLC.
Another way is to create a guest account for the camera, which will avoid leaking the admin password to others.

FongJeng Kum

Thank You for clarifying.

FongJeng Kum

I can just confirm that RTMP is not secure. I just did a capture of the packet and I can see it!
I have not tried RTSP yet, Will find time to confirm RTSP is also sending plaintext.

Bob

My pleasure, sir.