News for hackers. Stuff that matters.
Re:Reuters killed their RSS feeds? by epaulson on Friday June 19, 2020 @01:26PM (#23576748)
I wish there was an OAuth for RSS, so I could subscribe to private/paid feeds through reader apps I only partially trusted.
Re:Reuters killed their RSS feeds? by njkleiner on Friday June 19, 2020 @02:29PM (#23577457)
There actually is, kind of.

The IndieWeb[0] community has come up with a protocol called AutoAuth[1] that solves this exact problem.

It's only a rough draft at the moment and it is built upon the IndieAuth[2] protocol (which, in turn, is based on OAuth 2), but I think the way it works is highly fascinating.

Here[3] is a an overview of how it works.

[0]: https://indieweb.org/ [1]: https://indieweb.org/AutoAuth [2]: https://indieauth.spec.indieweb.org/ [3]: https://www.svenknebel.de/temp/autoauth.html

Re:Reuters killed their RSS feeds? by WGH_ on Tuesday June 23, 2020 @10:53AM (#23614666)
I've seen many sites that generate feed URLs with secret token appended as a query parameter. This token only gives an access to the feed, so this as safe as it gets, and requires no special support on reader app part.