Security Center
A safer and more reliable TV experience
At LiveTV.eu we take security, privacy and reliability seriously. We use modern technology and responsible practices to help protect our website, streaming links and visitors.
Security status
Checked on 18 October 2026
-
HTTPS / TLS
Active
TLS 1.3 and 1.2 only; TLS 1.0 and 1.1 are refused. HTTP redirects to HTTPS and HSTS is set for one year.
-
IPv6
Supported
The website and our nameservers are reachable over both IPv4 and IPv6.
-
DNSSEC
Not enabled
The livetv.eu domain is not signed with DNSSEC yet. This is an open improvement point.
-
Security headers
Active, can be tightened
CSP, HSTS, framing, MIME-type, referrer and permissions headers are sent. The CSP still allows inline scripts.
-
RPKI
Valid
The network routes to our web servers and nameservers have valid RPKI route origin authorisations.
How we protect your connection
Every page of LiveTV.eu is served over HTTPS. The connection between your browser and our website is encrypted with TLS 1.3 or TLS 1.2, using a certificate issued by Let’s Encrypt that your browser checks on every visit. Plain HTTP requests are redirected to HTTPS, and HSTS tells your browser to use HTTPS for one year.
Live streams are not hosted by LiveTV.eu: they come from the servers of broadcasters and other providers, and their security is managed by those providers. Our player only loads a stream after you press Play, and on our HTTPS pages it does not load insecure http:// streams.
Domain & network security
- IPv4 and IPv6 – the website and our nameservers answer over both.
- RPKI – the routes to our web servers and nameservers have valid route origin authorisations, which helps networks reject hijacked or mistaken route announcements.
- DNSSEC – not enabled yet, so DNS answers for livetv.eu are not cryptographically signed.
- CAA record – not set yet; it would limit which certificate authorities may issue certificates for livetv.eu.
Security headers
Our pages are sent with headers that tell your browser how to handle them safely:
- Content-Security-Policy – limits where scripts, frames and other content may come from; blocks plugins (
object-src 'none') and upgrades insecure requests. - X-Frame-Options and CSP
frame-ancestors 'self'– other websites cannot show LiveTV.eu in a frame. - X-Content-Type-Options: nosniff – files are only used as the type they are declared as.
- Referrer-Policy – other sites only see our domain, not the full page address.
- Permissions-Policy – camera, microphone, location, payment and USB access are switched off for our pages.
- Strict-Transport-Security – HTTPS only, for one year.
Ongoing security improvements
Security is an ongoing process. Our latest check found these open points. They are not in place yet:
- Sign the livetv.eu domain with DNSSEC.
- Add a CAA record for the certificate authority we use.
- Tighten the Content-Security-Policy so that inline scripts are no longer allowed.
Already in place: a security.txt file that tells researchers how to reach us.
Privacy & data protection
How we handle data, cookies and analytics is described on our Privacy & Cookies page. You can change your cookie choice at any time.
Responsible Disclosure
If you believe you have found a security vulnerability affecting LiveTV.eu, please report it responsibly and include enough information for us to understand and investigate the issue.
- Describe the issue, the affected page or address and the steps to reproduce it.
- Please do not access or change other people’s data and do not disrupt the service while testing.
Security contact
For security questions or vulnerability reports, email us at:
info@livetv.euThis address is also listed in our security.txt.
A trusted platform for live television
Our aim is to offer everyone, wherever they are, an accessible and dependable way to discover live television. We keep working on the security and reliability of LiveTV.eu, and we report its current state honestly on this page.