views:

131

answers:

1

Basecamp uses HTTP authentication for its RSS feeds but this means that Google Reader, Bloglines and Firefox/Safari RSS don't work.

Is it possible to secure an RSS feed but still allow access from these popular readers?

+1  A: 

Only possible solution I would think is use some randomly generated token inside URL to your feed. InfoQ works this way (with personalized feed) and I think many other. This way you can always revoke access to feed by simply changing token.

It has one disadvantage - it is not "protected" by password, so everyone who has can guess (or read from config files of your reader) URL has access to your feed.

And never, NEVER, put anything sensitive in this feed. Put only short summary and require users to open browser, log in and read more.

MBO
Same method that Google Calendar uses for its 'private' calendar feeds. Also mind though that Google Reader indexes and caches all your posts, I would not be surprised when they would turn up in someone else's search results...
Wim