Protected Video Infrastructure

Worked on the protected video infrastructure to restrict playback to authorized users and devices.

Stack

• Backend: Node.js
• Storage: Cloud object storage
• Playback: HLS with encrypted segments
• Auth: JWT-based device authorization

Approach

• Signed playback URLs with short expiration windows.
• Rotated encryption keys per release window.
• Logged playback events for abuse detection.
• Added device-binding checks to reduce credential sharing.

Lessons Learned

Security is only as good as the weakest link. Key rotation and observability matter more than encryption alone.