Techniques to ensure that a content stream will be encrypted prior to it being served it to the stream receiver if either the stream receiver returned an initial status to the stream caster indicating that only encrypted streams will be accepted or if the user of the stream caster optioned that only encrypted streams will be cast. A stream casting device is capable of locally sourcing and encrypting streams. A content stream server is capable of sourcing encrypted streams and encrypting streams on the fly. A stream receiver device is also described. The system manages key exchanges, encryption, and decryption across the devices serving streams, and stream receiving devices. The casted streams, residing on either a content stream server or on the stream casting devices will be encrypted prior to being served.