On Thu, Jun 4, 2009 at 1:12 PM, Justin Richer <[email protected]> wrote:

>
> I've got an app here that we'd like to have authenticated RSS feeds on
> it-- non-public data that nonetheless can stream pretty nicely in an RSS
> format. It seems that OAuth-for-desktop-apps is a great fit for this,
> with the only problem being that the RSS readers would have to support
> this at the client level. Has anyone tried to build this into a reader?
> A quick search turned up nothing, but am I missing anything obvious?
>
> The biggest problem I can see is that since OAuth requests are nonce'd
> and signed unqiuely, which gets away from the spirit of RSS's
> one-URL-per-feed (if you're using GET parameters, especially). I've seen
> authenticated RSS by way of per-stream tokens, and I've seen a few RSS
> readers that implement HTTP-BASIC auth. This feels like it's a good fit
> with bad timing.


Yeah, no one has implemented yet because of that dang chicken. Or was it the
egg?

Still, it's something that you could try to push an open source feed reader
to implement as a first effort just to prove the model and concept, and
eventually, as more feeds are made available that are protected with OAuth,
we might actually see more of the proprietary feed readers follow suit.

Curiously Twitter apps are basically specialized feed readers that don't
support standards (instead, they support the Twitter API) — so once Twitter
pushes developers to move to OAuth (which I presume will include desktop and
mobile clients) we might see more feed readers adopt this model.

Chris

-- 
Chris Messina
Open Web Advocate

Website: http://factoryjoe.com
Blog: http://factoryjoe.com/blog
Twitter: http://twitter.com/chrismessina

Diso Project: http://diso-project.org
OpenID Foundation: http://openid.net

This email is:   [ ] bloggable    [X] ask first   [ ] private

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"OAuth" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [email protected]
For more options, visit this group at http://groups.google.com/group/oauth?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to