Tuesday August 09, 2016

Protecting Netflix Viewing Privacy at Scale

The Netflix tech blog has a post explaining how the company has added a new layer of protection to its video streaming for its for 80+ million customers. According to the blog post, by the end of 2016, the company will be adding TLS encryption on its Open Connect servers without impacting efficiency.

In the modern internet world, we have to focus not only on efficiency, but also security. There are many state-of-the-art security mechanisms in place at Netflix, including Transport Level Security (TLS) encryption of customer information, search queries, and other confidential data. We have always relied on pre-encoded Digital Rights Management (DRM) to secure our video streams. Over the past year, we’ve begun to use Secure HTTP (HTTP over TLS or HTTPS) to encrypt the transport of the video content as well. This helps protect member privacy, particularly when the network is insecure - ensuring that our members are safe from eavesdropping by anyone who might want to record their viewing habits.