Does hotlinking protection apply to generated thumbnails as well?

User 2022-04-27 16:57:00 UTC in Paywall: WMSAuth and beyond

If you enable paywall and hotlink protection with a hash for a particular stream, does that also enable paywall protection for the generated thumbnails? For example:


Otherwise this would be a way for someone to partially view the stream content if you are trying to keep that private.

Alex Pokotilo 2022-04-28 01:36:21 UTC 

good question. Thumbnails were primarily intended for cases there people want to show current/past state of archive. With wmsauth you need to specify what protocol to protect explicitly. thumbnails are not belong to any protocols like hls,dash, pd. We probably need to add thumbnails as separate item in wmsauth rules. And if user enabled thumbnail in wmsauth rules, server should reject requests without signature.
What do you think of that ?

Sergei 2022-04-28 02:10:11 UTC 


This is expected default behaviour.

It is actually works for mp4 thumbs which is considered as PD (progressive download), but not for jpg thumbs which are not marked as PD.

As a workaround, to make jpg protected, you can mark jpg as PD via the following option in /etc/nimble/nimble.conf:

Do not forget to restart Nimble after editing nimble.conf (e.g. sudo systemctl restart nimble)

Please find details on the next page:

Thank you.

User 2022-04-28 02:23:17 UTC 

Yes, that sounds like it makes sense and would be a very good implementation. Another use for thumbnails that has become common is using them to provide a quick preview as you mouse over the timeline of a long running stream, for example, to help you figure out where you want to navigate. I think this sounds perfect for that use case when that stream is protected by wmsauth and encryption.

Alex Pokotilo 2022-04-28 02:56:35 UTC 

Sergey is right. if you check "Progressive Download" checkbox in wmsauth rules all your ".mp4" thumbnails will be protected. To protect ".jpg" thumbnails please add following parameter into nimble.conf
after restart "Progressive Download" checkbox in wmsauth will for for ".jpg" thumbnails as well.
It looks like you can archive what you want even now !

User 2022-04-28 05:25:38 UTC 

Just tried this out it works perfectly. Thanks guys! This is a nice little hidden feature.

Post a reply

Post a new question


This website or its third-party tools use cookies, which are necessary to its functioning and required to achieve the purposes illustrated in the Privacy Policy. If you want to know more or withdraw your consent to all or some of the cookies, please refer to the Privacy Policy.
By closing this banner, scrolling this page, clicking a link or continuing to browse otherwise, you agree to the use of cookies.