M3U8 / HLS Glossary

An HTTP response meaning the server understood the request and refused it. A 403 response and a CORS error describe different layers.

Check the response · Reference

In HLS, METHOD=AES-128 declares full-segment AES encryption in CBC mode. It is an encryption method, not by itself a DRM licence system.

Inspect encryption declarations · Reference

HTTP-header rules used by browsers to decide whether scripts may read cross-origin resources. Opening a URL in a tab does not establish script access.

Check browser access · Reference

Controls for protected-media access and use. Playback may require a supported key system and valid licence; this site’s inspection tools do not supply licences.

Inspect declared protection · Reference

An HLS tag declaring encryption for following media segments. Inspect METHOD and KEYFORMAT; the tag alone neither establishes DRM nor guarantees decryption.

Inspect encryption declarations · Reference

HTTP Live Streaming delivers media through playlists and segments over HTTP. A readable playlist does not prove that all its media can play.

Open the player · Reference

Live playlists can refresh as media arrives; VOD describes a finished presentation. EXT-X-ENDLIST means no further segments will be added to that media playlist.

Open the player · Reference

A UTF-8 text playlist that lists media segments or other playlists. It contains references, rather than the video itself.

Check a playlist · Reference

A playlist that lists variant streams and may declare alternative audio or subtitles. Its stream entries point to media playlists.

Inspect playlist structure · Reference

A playlist describing a sequence of media segments for one rendition. EXTINF supplies segment durations, followed by the corresponding media URIs.

Inspect media entries · Reference

A unit of media referenced by a media playlist. It may be a separate resource or a byte range; it need not be a .ts file.

View segment references · Reference

An access URL carrying signature or policy parameters. Its validity depends on the issuer’s rules, such as expiry; removing parameters can invalidate access.

Check an authorized URL · Reference