Re:BBC podcasts on third-party apps
by ascagnel_ on Thursday March 28, 2019 @09:42AM
(#19512082)
I'm also a premium subscriber; while they used to use basic HTTP auth, they've since switched to generating revocable, per-user keys. It's both better for security and easier for podcast clients to manage.
[ Parent
| on HN ]
By "revocable, per-user keys" do you mean each user is given a unique URL to download premium content from or is some type of cryptographic DRM being leveraged?
Yup; you get a URL to the premium feed with a unique hash on the end.
Re:BBC podcasts on third-party apps
by foobarandgrill on Thursday March 28, 2019 @01:51PM
(#19514715)
I'd imagine it's a token in the request headers
I doubt it's request headers since that would require the podcast player to set them. Putting it in the URL itself would make it work with every player on the planet.