# End to End Encryption **URL:** \ **Category:** General Discussions\ **Created:** [July 22, 2016, 2:31pm UTC](https://forums.plex.tv/t/end-to-end-encryption/152360 "2016-07-22T14:31:00Z")\ **Posts on this page:** 12\ **Page:** 1
**Author:** ![Sswhitehead](https://avatars.discourse-cdn.com/v4/letter/s/51bf81/32.png) [@Sswhitehead](https://forums.plex.tv/u/Sswhitehead)\ **Post date:** [July 22, 2016, 2:31pm UTC](https://forums.plex.tv/t/end-to-end-encryption/152360/1 "2016-07-22T14:31:00Z")
So I have been looking at how the packets flow when you stream content and they seem to be sent as straight tcp packets instead of in some encrypted form. My question is what part of plex is secured with SSL? Is it just the authentication process, is it while your streaming content? ---
**Author:** ![hthighway](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/hthighway/32/82003_2.png) [@hthighway](https://forums.plex.tv/u/hthighway)\ **Post date:** [July 22, 2016, 2:35pm UTC](https://forums.plex.tv/t/end-to-end-encryption/152360/2 "2016-07-22T14:35:34Z")
Have you looked through… [https://support.plex.tv/hc/en-us/articles/206225077-How-to-Use-Secure-Server-Connections](https://support.plex.tv/hc/en-us/articles/206225077-How-to-Use-Secure-Server-Connections) Or even this… > **[How Plex is doing HTTPS for all its users](https://blog.filippo.io/how-plex-is-doing-https-for-all-its-users/)** > > This week Plex, a self-hosted media server, announced that they now offer TLS to secure all connections, including those to the user's servers. This is actually pretty interesting. Background A quick overview of the Plex architecture to understand... ---
**Author:** ![OttoKerner](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/ottokerner/32/10079_2.png) [@OttoKerner](https://forums.plex.tv/u/OttoKerner)\ **Post date:** [July 22, 2016, 2:36pm UTC](https://forums.plex.tv/t/end-to-end-encryption/152360/3 "2016-07-22T14:36:39Z")
they are fully encrypted using TLS, so long as the client supports it and the server enforces it. And if both are are to use the proper FQDN of your server which it gets assigned. [https://support.plex.tv/hc/en-us/articles/206225077-How-to-Use-Secure-Server-Connections](https://support.plex.tv/hc/en-us/articles/206225077-How-to-Use-Secure-Server-Connections) ---
**Author:** ![Sswhitehead](https://avatars.discourse-cdn.com/v4/letter/s/51bf81/32.png) [@Sswhitehead](https://forums.plex.tv/u/Sswhitehead)\ **Post date:** [July 22, 2016, 5:23pm UTC](https://forums.plex.tv/t/end-to-end-encryption/152360/4 "2016-07-22T17:23:20Z")
The packets in wireshark are show as TCP packets with no encytion in any of the headers. This is with my phone using the plex app connected to my computers shared wifi. Should I be seeing TLSv2 packets instead? ---
**Author:** ![OttoKerner](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/ottokerner/32/10079_2.png) [@OttoKerner](https://forums.plex.tv/u/OttoKerner)\ **Post date:** [July 22, 2016, 5:35pm UTC](https://forums.plex.tv/t/end-to-end-encryption/152360/5 "2016-07-22T17:35:09Z")
> @Sswhitehead said: > The packets in wireshark are show as TCP packets with no encytion in any of the headers. This is with my phone using the plex app connected to my computers shared wifi. Should I be seeing TLSv2 packets instead? It depends where these packets are are going and whether you succeeded to make the secure connections work. But yes, all traffic between your own server machine and the mobile device should be encrypted. There might be other traffic directed to the plex cloud which might be not encrypted, but this doesn’t contain media data. Do note: after changing the preference Settings - Server - Network - Secure Connections you need to re-start the server for the change to get applied. ---
**Author:** ![MacGriogair](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/macgriogair/32/5196_2.png) [@MacGriogair](https://forums.plex.tv/u/MacGriogair)\ **Post date:** [July 22, 2016, 6:16pm UTC](https://forums.plex.tv/t/end-to-end-encryption/152360/6 "2016-07-22T18:16:31Z")
TLS is an application layer protocol, TCP is transport layer. That the headers aren’t encrypted is perfectly normal, only the payload of a TLS session will be encrypted. Also, even with IPsec, the packet headers required for routing will be in the clear. ---
**Author:** ![Oshikuru](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/oshikuru/32/24630_2.png) [@Oshikuru](https://forums.plex.tv/u/Oshikuru)\ **Post date:** [October 10, 2017, 11:20am UTC](https://forums.plex.tv/t/end-to-end-encryption/152360/7 "2017-10-10T11:20:56Z")
Hey all, I know this thread is a bit old, but my question is exactly regarding the same topic. So if the payload is encrypted with TLS and the hearders are plain TCP, the packets all show up as play TCP in some dump as the OP said. How is it possible to tell if encryption works and the payload gets encrypted? thanks greets! ---
**Author:** ![OttoKerner](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/ottokerner/32/10079_2.png) [@OttoKerner](https://forums.plex.tv/u/OttoKerner)\ **Post date:** [October 10, 2017, 11:46am UTC](https://forums.plex.tv/t/end-to-end-encryption/152360/8 "2017-10-10T11:46:04Z")
> @Oshikuru said: > How is it possible to tell if encryption works and the payload gets encrypted? If you see a green padlock icon on your server’s name, you know that the connection between your current client and this server is encrypted. ![](https://sea1.discourse-cdn.com/plex/uploads/default/original/3X/b/d/bd1700fe9d4dccd40d1429de8101376a8be5010a.png) ---
**Author:** ![Oshikuru](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/oshikuru/32/24630_2.png) [@Oshikuru](https://forums.plex.tv/u/Oshikuru)\ **Post date:** [October 12, 2017, 6:22am UTC](https://forums.plex.tv/t/end-to-end-encryption/152360/9 "2017-10-12T06:22:34Z")
Hey, thx, I know about the green lock, but thats just an icon which could be set when I enable the “secure”-option or it could just point out, that the communication to plex.tv-servers is encrypted. I want to know if the video stream itself is encrypted and how to ensure that, possibly via wireshark or any. thanks! ---
**Author:** ![Oshikuru](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/oshikuru/32/24630_2.png) [@Oshikuru](https://forums.plex.tv/u/Oshikuru)\ **Post date:** [October 12, 2017, 8:17am UTC](https://forums.plex.tv/t/end-to-end-encryption/152360/11 "2017-10-12T08:17:54Z")
Ok, if I check some browser data I can see the TLS in any single line of the application data (after handshake is done) in wireshark like this: (removed) Regarding plex, I do see the encrypted handshake (between my server and plex.tv), but the application data is only listed as TCP as the OP did point out in the original post. So for me it does look like encrypted auth with plex.tv servers, but not encrypted stream, huh? ---
**Author:** ![OttoKerner](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/ottokerner/32/10079_2.png) [@OttoKerner](https://forums.plex.tv/u/OttoKerner)\ **Post date:** [October 12, 2017, 12:21pm UTC](https://forums.plex.tv/t/end-to-end-encryption/152360/12 "2017-10-12T12:21:00Z")
> @Oshikuru said: > thx, I know about the green lock, but thats just an icon which could be set when I enable the “secure”-option or it could just point out, that the communication to plex.tv-servers is encrypted. No, it shows up when the channel to this particular server is encrypted. That inlcudes of course all media packets. At the beginning of this thread we posted the same link twice already. I recommend you to actually take a look at it. [https://support.plex.tv/hc/en-us/articles/206225077-How-to-Use-Secure-Server-Connections](https://support.plex.tv/hc/en-us/articles/206225077-How-to-Use-Secure-Server-Connections) There is also this blog post linked in it, which explains the whole enchilada even further: > **[How Plex is doing HTTPS for all its users](https://words.filippo.io/how-plex-is-doing-https-for-all-its-users/)** > > This week Plex \[https://plex.tv/\], a self-hosted media server, announced > \[https://blog.plex.tv/2015/06/04/its-not-easy-being-green-secure-communication-arrives/\] > that they now offer TLS to secure all connections, including those to the... ---
**Author:** ![system](https://global.discourse-cdn.com/plex/original/3X/2/a/2acb9765406f63293d357b4ec509ec39aa28f2ad.png) [@system](https://forums.plex.tv/u/system)\ **Post date:** [January 7, 2020, 9:39pm UTC](https://forums.plex.tv/t/end-to-end-encryption/152360/13 "2020-01-07T21:39:57Z")