I’m creating a site that shows videos. I’m using the VideoJS player(HTML 5 with a flash fallback – http://videojs.com/) and am using .mp4 files.
My client is concerned that someone may be able to steal/download the video files.
What can I do to ensure nobody can download the video files?
Well first off, you want to clarify with your client that actually they do want people to download the video, because if people couldn’t download it then they can’t watch it. The issue is that you don’t want people to store a copy that they could then edit or share offline or whatever. This might sound to them like nit-picking, but it’s pretty crucial to understand. For starters, once they understand this they might decide “you know what, I don’t care about this after all”.
Second, there is no way to entirely stop people from saving an offline copy of your files. You can make things a little harder, but because there is no way to entirely stop them you really have to decide whether or not you even want those videos online.
If after all that you are still wanting to put the videos online with some minimal protection, then what you could do is not directly embed the videos in the HTML but rather have JavaScript on the page talk to your server and request a video.