34

Since Flash is losing ground I would like to know if there are ways to protect html5 videos with DRM (H264, .ogg and WebM).

4
  • I can't find the spot on that page specifically mentioning DRM support with MOV files. Can you please clarify the exact source? (I might just be missing it.) Thanks! Jun 23, 2010 at 16:40
  • 1
    Quicktime streaming uses hinting which at least prevents users from using save as feature. It's not a true DRM solution since it's very easy to find out what files to directly point to.
    – Joost
    Jun 24, 2010 at 9:52
  • 2
    The movie industry hasn't found a way to "protect" Hollywood movies. The internet hasn't found a way to "protect" other media on the web that the user can view, like even static images. You're looking for something at the intersection of these two. And any 'solution' you find will still be trivial to bypass with any of the free/cheap programs which can capture any video my computer is playing. I would say your time is better spent elsewhere, like improving your content, e.g., Spielberg isn't losing sleep over this. :-)
    – Ken
    Oct 21, 2010 at 15:48
  • The W3C bug tracker has a good discussion on this subject if anyone is interested: w3.org/Bugs/Public/show_bug.cgi?id=10902
    – Joost
    Jul 28, 2011 at 9:11

7 Answers 7

24

On the W3C FAQ on HTML5 it states:

Is there support for digital rights management (DRM) in HTML5 video? HTML5 doesn't provide direct support, nor any barrier, to using DRM in video. It currently expects this to be handled by the particular codec/implementation. There are implementations which allow for DRM in HTML5 video.

Is dealing with DRM in scope for HTML5? If enough stakeholders want to standardise some aspect of handling DRM in HTML5 itself as part of the inclusion of video and audio media, then it makes sense for W3C to help standardise an approach which meets the needs of the market. However like all W3C work, relevant stakeholders need to be and show they are committed to developing it rather than expecting it to happen on its own.

Which means it's currently not supported, but there has been a discussion about it on the W3C bug tracker here.

Update: People interested in this subject might want to consult the working draft of the new encrypted media extension standard.

Updated: EME is currently supported in major browsers.

6
  • I added this as answer since it adds some relevant new information.
    – Joost
    Jul 28, 2011 at 9:26
  • 2
    Netflix recently is going to try to implement their approch techblog.netflix.com/2013/04/html5-video-at-netflix.html to protect their content and also use Html v5
    – hmadrigal
    Apr 17, 2013 at 15:58
  • @Joost : I need more details about the browser versions which support EME. Mar 2, 2015 at 1:08
  • Chrome 34+, IE 11+, Chrome for Android 34+, and Safari 8+ support versions of EME (maybe not the latest, feel free to look up more detailed information). Firefox EME support is in the works bugzilla.mozilla.org/show_bug.cgi?id=eme
    – Joost
    Mar 2, 2015 at 15:01
  • @user2284570 also see Tony's answer.
    – Joost
    Mar 2, 2015 at 15:19
9

It does now. https://dvcs.w3.org/hg/html-media/raw-file/tip/encrypted-media/encrypted-media.html

Here is an example. http://www.html5rocks.com/en/tutorials/eme/basics/

This is the best page that I could find on current browser support. http://www.jwplayer.com/html5/mediasource/

At the time of writing this, EME is supported in

  • IE11 in Win8.1
  • Chrome (Desktop and mobile)
  • Safari 8 in OSX Yosemite
4

Probably not, even though there's an EME DRM plug-in interface.

Some browsers now support another type of a plug-in called EME (Encrypted Media Extension CDM) for vendor-specific DRM implementations such as Microsoft PlayReady, Google WideVine, Apple FairPlay, etc.

However, the only part of it that is a public standard is a JS API that launches a vendor-specific EME plug-in.

The actual DRM API required to make use of it is vendor-specific, secret and proprietary. To have working DRM across browsers you will have to sign separate contracts with Adobe, Microsoft, Google and Apple (which may be difficult if you're not Netflix).

Consider abandoning idea of DRM, as it's more likely to backfire than protect the content.


This is an updated answer, comments don't make sense any more

2
  • 2
    Out of general interest in HTML I thought this was interesting to ask, maybe test some hacks. Your suggestions seems easily fooled with a simple plugin. One 'hack' I found out is a way for video to be impossible to completely download. I do this by letting the download not complete by infinitely delaying/sleeping the process when it's almost finished downloading. This will still allow the video to be viewed but not downloaded using only html5 and a server side hack. This hack is of course not 100% safe and bad for the resources on the server side, but there should be a solution for that.
    – Joost
    Aug 2, 2010 at 8:11
  • 1
    Of course these tricks can be easily worked around. Hack with server never completing download won't stop anyone either – in most browses user can simply click "stop" to stop download and keep data that's been downloaded so far.
    – Kornel
    Aug 3, 2010 at 13:20
3

Already in chrome.

Here is a running example using it.

2
  • 1
    Good point. Though still you have to Encrypted Media Extensions on <video> elements in chrome://flags/ and restart Chrome for this to work.
    – Joost
    Feb 16, 2013 at 19:29
  • what is this answer explaining? Oct 26, 2021 at 9:29
1

Widewine provides video DRM for HTML5 and h.264. Recently, another company Haihaisoft said they released HTML5 DRM for MP4 and WebM video: . It doesn't need Flash anymore. You might try it online. HTML5 Demo in Xvast browser DRM-X 4.0 in the news

1
  • is there any DRM for a webpage containing images? Oct 26, 2021 at 9:28
0

You could implement some kind of encryption scheme with public/private key - I recently heard about http://www.widevine.com/ who seem to be doing something like that for html5 and h.264 . But I am not aware of anyone having applied to web video in general.

3
  • 1
    They don't seem to offer anything html5 related. It's mainly a flash implementation. Also Netflix uses Widevine but isn't moving to HTML5 anytime soon because of the DRM concerns.
    – Joost
    Jun 7, 2010 at 7:50
  • I recently saw a presentation where they claimed to be supporting HTML5 (i.e. H.264 probably)
    – Silvia
    Jun 7, 2010 at 12:31
  • 1
    Their Demo page seems to require flash... (Flash 10.x+)
    – Nick
    Feb 24, 2012 at 10:27
-2

Sure you can stop someone from downloading the file simply by not giving them permission to download anything from certain folders on your server. Maybe there is something I am missing here. Seems like that would be a relatively easy solution.

1
  • 4
    The idea with DRM is that the user can access a file under certain conditions. You would be able to let the user view the video, but not to download it. Silverlight and Flash provide DRM video for the web but it's of course better to use native HTML elements.
    – Joost
    Oct 1, 2010 at 10:16

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.