SoylentNews is people
SoylentNews
from the when-does-a-video-stream-become-a-river? dept.
Ars Technica reports that Netflix is about to encrypt all its video streams with HTTPS. The feature will be rolled out in the coming year. This comes after one failed attempt six months ago.
Netflix's entry into the HTTPS party comes as privacy and security advocates are calling on all websites to encrypt all their traffic. The rationale behind the request is that continuous and complete HTTPS protection thwarts state-sponsored attacks that countries like the US and China launch from the Internet backbone. Web encryption is also useful against man-in-the-middle attacks that hijack huge chunks of Internet traffic. In both cases, HTTPS prevents the attacker from surreptitiously injecting malicious packets into the targeted data stream.
According to El Reg, this change will increase costs considerably for Netflix:
Netflix has battled with the overheads HTTPS incurs; Watson estimated a capacity hit between 30 to 53 percent thanks to encryption computational overheads and a lack of optimisations to avoid data copies to and from user space.
Such a hit would cost Netflix potentially hundreds of millions of dollars a year.
Tweaks could cut that overhead by a third while speculative advancements in the next several years could crush it by up to 80 percent.
Do we really need encrypted video streams?
(Score: 1, Interesting) by Anonymous Coward on Sunday April 19 2015, @03:11PM
yes, and what the hell is a malicious package in a video stream supposed to do? other than fightclub inspired people injecting porn into family movies...
it's a video stream. the only thing you can do to it is corrupt it.
(Score: 2) by mhajicek on Sunday April 19 2015, @04:17PM
They're packing hay around the needle.
The spacelike surfaces of time foliations can have a cusp at the surface of discontinuity. - P. Hajicek
(Score: 4, Insightful) by Anonymous Coward on Sunday April 19 2015, @04:39PM
> yes, and what the hell is a malicious package in a video stream supposed to do?
Exploit bugs in the player software. Perhaps there are edge cases in the decoder that a specially crafted mpeg packet can use to do stack smashing, etc.
Besides, maybe I don't want anyone figuring out what shows I am watching. [wikipedia.org] I can totally see Comcast snooping that and use it to profile their ISP customers as a way to extract revenue from cord-cutters.