Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have some doubts about how the RSS private feeds, get transferred between one portal to another.

The whole point is to allow private RSS feeds to be consumed by external clients, and in 99% of cases, they support basic authentication and SSL. The problem is that external clients can't use FORM authentication of the portal to reach the private pages, making existing private RSS feeds all but useless.

Is there anyway this problem can be resolved, or is it already resolved I need to know.This will help me in a project that I started working on,I want a service that will enable two separate bloggers to share their private posts with each other without necessarily requiring a user name.

share|improve this question

I think you should use some kind of tokenning system, if a blogger want to share his RSS feed with another blogger he just has to give the token to the other user, or even better generate a unique token for each reader.

Something like :

share|improve this answer

Its a know problem that many RSS readers don't handle authentication correctly. The best option is to use a token (key) system like Techbrunch suggests. If you want to keep the tokens private then force SSL with a redirect on port 80.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.