RTMP secure?

[FongJeng Kum_34673838378]

Hi,

I am using VLC player on my PC to access to RTMP stream of my IPC. Can I find out from you, is this secure?
Cuz the URI that I use is of following:

rtmp://ipcaddr/bcs/channel0_ext.bcs?channel=0&stream=2&user=admin&password=plainpassword

Is the "password" field able to be seen if someone uses WireShark or some monitoring software to see it?
Or is this encrypted?

[Bob_30281727886]

We think the password could be leaked this way. So it's advised to use Web client for locally accessing the camera. And it will be encrypted with https.
If the camera is being used to monitor something not too private, it's okay. But when it comes to monitoring indoors area, it's better not to use that rtmp url with VLC.
Another way is to create a guest account for the camera, which will avoid leaking the admin password to others.

[FongJeng Kum_34673838378]

Thank You for clarifying.

[FongJeng Kum_34673838378]

I can just confirm that RTMP is not secure. I just did a capture of the packet and I can see it!
I have not tried RTSP yet, Will find time to confirm RTSP is also sending plaintext.

[Bob_30281727886]

My pleasure, sir.