Like i said before

c0nw0nk Wrote:
-------------------------------------------------------
> Update your web application for example (PHP) first then how ever many
> hours later when all caches for your web application have cleared
> restart your Nginx so it only accepts secure links.


Update your app first so your app outputs secured links.

Then when all caches and users are ready update Nginx config / restart Nginx to force secured links only.

Both of your links

http://testapp.com/video/master.m3u8?token=xyz&exp=123

http://testapp.com/video/master.m3u8

Will work without Nginx being updated thats why you update your app outputs first common sense that way everyone gets using the secured link without it being secured but your logs will show you accepting ?token &args.

http://www.networkflare.com/