Originally Posted By: andy
How exactly are they supposed to add any protection, besides restricting by IP address, to an HTML5 streamed video ?

Yeah. You can't do much. The BBC had this problem when they implemented iPlayer for iPhones/iPods and it was defeated in minutes. Check it is a UK IP. Check that user agent matches something iPhoneish. Check that you've got a cookie from the iPhone version of the iPlayer website. Check that the request has the quirky ranges that only the QuickTime player on the iPhone gives.