Replies: 1 comment 2 replies
-
|
The so-called "HWID" is a kind of DRM mechanism. I don't want to introduce or promote DRM or any other private HTTP authentication methods. It is better to refuse to use service providers that use DRM to restrict users. |
Beta Was this translation helpful? Give feedback.
2 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
Problem
Some subscription providers implement two layers of access control on the client side:
1. User-Agent filtering
Providers block requests where
User-Agentdoes not match their approved client list. Most mature clients already support overriding the UA, so this is a minor inconvenience at worst.2. Device metadata headers
A more serious issue: providers require proprietary headers carrying device-specific metadata to be present in subscription fetch requests. Based on observed traffic, these typically include fields like:
Without these headers, the server returns an error or empty config instead
Beta Was this translation helpful? Give feedback.
All reactions