Thoughts, stories and ideas about video transcoding and streaming.
18 min read
Multi-DRM myth: 3 DRMs = 3 encryption pipelines. It doesn't. CENC encrypts once, CMAF packages once, serving Widevine, FairPlay & PlayReady from one source. The real complexity is the license server layer. Our breakdown covers the stack, device matrix & build-vs-buy.

18 min read
Running your own Widevine license server adds infrastructure, not security—most devs learn this 3 months in. This guide maps the 3 paths to production DRM (self-host, DRMaaS, managed hosting), the CWIP certification barrier, token code, and the April 2027 Cloud License Service retirement.

22 min read
Most DRM guides only compare EZDRM vs CastLabs—the per-license model, one of three. We ran 2026 numbers on all three, including the one articles skip: hosting platforms with DRM as a flat add-on. For 1,000 students, 10 videos/month, Gumlet's $99 plan + $99 DRM beats Mux's DRM charge alone.

13 min read
Course on a pirate site? Act fast: hours 0–2, document everything before it vanishes. 2–6, file DMCA takedowns (Google, Telegram, Cloudflare, host). 6–24, rotate passwords, revoke tokens, trace the leak via watermark IDs. Days 1–7, monitor and tally damages. Week 2+, add DRM.

16 min read
Most creators only discover video security gaps after a student forwards a lesson link. This 15-minute pre-launch checklist covers 5 areas of risk: hosting, DRM, access controls, watermarking, and takedowns. 32 binary checks. Plain English. No dev needed. Know your launch-day risk before publishing.

15 min read
Teachable, Thinkific, and Kajabi route video through Wistia—no DRM. Vimeo only adds DRM at Enterprise pricing. So any enrolled student with a free tool can rip your course videos. We tested all five platforms and found the fastest path to real DRM. Read the full breakdown on the Gumlet blog.

10 min read
Most course creators looked into DRM, found it expensive and complicated, and walked away. The problem is that the mental model was formed during 2015-2019 enterprise setups. Modern managed DRM is invisible to viewers, runs on virtually every device, and activates without touching a license server.

16 min read
Private" only hides a video's URL. It doesn't stop anyone with the link from grabbing the stream. Most platforms offer just that one label, not real protection. This piece maps 7 signs that reveal if your host actually secures your content, each checkable in 60 seconds.

17 min read
Still on VdoCipher? Gumlet, Bunny Stream, and Kinescope now match its multi-DRM coverage while beating it on price, speed, and dashboard UX. Our honest comparison covers six alternatives plus a real migration timeline. Paying more than expected at scale? Worth 10 minutes.