@itpp, you're right but even if we can partially solve this problem, it'll
be sufficient for us. Well, using below method worked in our case :

location ~ \.(mp4)$ {
mp4;
root /var/www/html/conversion;
expires 1d;
valid_referers servers domain.net content.domain.com ;
if ($invalid_referer) {
return 403;
}
}

This config is only permitting domain.net and domain.com while preventing
any other referer header such as "empty" one.

On Tue, Mar 17, 2015 at 3:38 PM, itpp2012 <nginx-forum@nginx.us> wrote:

> Which can all be faked (eventually), build some kind of
> validation/authentication system before launching your app.
>
> Posted at Nginx Forum:
> http://forum.nginx.org/read.php?2,257269,257314#msg-257314
>
> _______________________________________________
> nginx mailing list
> nginx@nginx.org
> http://mailman.nginx.org/mailman/listinfo/nginx
>
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx