Skip to main content

SRTP / RTSPS

Secure Real-time Transport Protocol (SRTP) and RTSP over TLS (RTSPS) are security extensions that protect real-time audio/video streaming.

SRTP

SRTP secures media streams by encrypting and authenticating RTP traffic. It provides confidentiality, integrity, and replay protection for audio and video data while keeping latency low — which is critical for real-time media.

RTSPS

RTSPS is the secure version of RTSP, where TLS encrypts RTSP signaling (similar to HTTPS for HTTP). It protects control-plane information such as stream URLs, session setup and control messages, credentials, and parameters from eavesdropping or tampering.

When and why to use them

Low-latency secure unicast streaming

In some unicast deployments, you can use RTSPS together with SRTP to transport media over RTP/UDP rather than over HTTPS/TCP. This avoids TCP retransmissions and head-of-line blocking, resulting in:

  • Lower end-to-end latency
  • More predictable timing under packet loss
  • Better suitability for live video

Multicast streaming

In multicast scenarios, multiple receivers subscribe to the same stream:

  • You need SRTP because multicast traffic is visible to anyone on the network segment. Encryption ensures only authorized receivers can decode the media.
  • You can use RTSPS for secure session setup and key exchange, while the media itself is distributed efficiently via multicast.

Summary

RTSPS secures control and signaling, while SRTP secures media. Together, they provide strong end-to-end protection for RTSP-based streaming while preserving low latency, making them well suited for secure unicast and multicast deployments.