First thanks for everything you are doing. If you want to add a good looking paywall, then I am good to go and will only use S3Bubble. However, right now, that’s not the case, so I am trying to make S3Bubble work with other products, so please forgive my under the hood questions. I am happy to take this to e-mail offline if I am pushing too hard for the ‘secret sauce”
I am clearly missing something about AES encryption / decryption.
I have set up a Streamium website, and put a few encrypted videos up. If I go to the website from a new computer (so not Canonical AWS user), I can easily view the encrypted content. So that leaves a few questions:
1) Does AES work on as two key system? A public and Private?
2) What is the *.key file (360p, 480p, 720p.key) Is that a public or private key?
3) Where is the other key stored… based on answer 2.
4) I am not clear how bucket policies effect users abilities to access the keys. Are you able with bucket polices to prevent the *.key from being download while allowing access to other files?
Doug
PS. I am turning over a life’s amount of work, so I want to make sure its secure before committing to one vendor. As you have pointed out in your videos, a lot of vendors toss around the words security, but the videos are not. I get there is AES128 encryption going on here, but if I don’t have my developers implement it properly, all this effort is a waste.
