[pubsubhubbub] Verifying the true source of an entry

[Ka-Ping Yee]

Hi,

Is it true that feed publishers can publish entries with any URIs as the
<atom:id>s for the feeds and entries, and PubSubHubbub will accept them?  If
so, then when PubSubHubbub sends me (a subscriber) a feed full of updated
entries, is there any way for me to tell for sure which entries came from
which feeds?  It seems that feed publishers can spoof each other, unless I
use a different callback URL for each individual subscription.  Am I missing
something?

Thanks!


— Ping