Digital Rights Management: The Good, The Bad, and The Ugly
summary
State of DRM today: concrete workflows, failure modes, and mitigations. Covers CDMs and standards (EME, Widevine PlayReady FairPlay), init data → license request → CDM update, and server-side license decisions that use device certificates and capabilities. Practical fixes include service certificate causing double license requests, persistent and bulk license fetches, and separating audio/video keys to limit leaks (separate audio and video keys). Notes fragmentation (CBC support on <50% Android) and that multi‑DRM is required to reach ~95% of users.
AI-written summary · about
chapters (19)
- 0:00Intro
- 0:59Lets set the Stage
- 2:22Clear Key vs DRM Licenses
- 5:00Simple License Acquisition Workflow
- 6:47Init Data
- 9:41DRM License Properties
- 10:43Content Decryption Module
- 15:19CDM Client Capabilities
- 20:44Time to play
- 22:10Playback Startup time Clear Key Packaging
- 25:02Bulk License Delivery
- 25:46DRM Backends and Common Encryption
- 26:37Multiple Keys per Content Type
- 28:09Content Encryption
- 28:54Single Content Library
- 30:16SCL - Challenges
- 31:32Content Owner Requirements
- 32:26Track Selection
- 34:40Access Denied or Error Code-2998
related talks
44mEME? CDM? DRM? CENC? IDK!
13mSecurity Theater: Moving Beyond Performative Content Protection
14mNavigating HTML5 Encrypted Media Extensions
35mOverview of Linaro DRM
28mEME? CDM? DRM? CENC? IDK!
23mOpenCDM/CDMi (Multi DRM) work with WPE & Chromium
14mDefective by Design: Universal Recovery of All Widevine-Protected Content on Desktop...
21mLock it Open: What FLOSS Taught Us about Being Our Best Selves