Hi,

First of all, let me say that Redmine is a great product. However, I recently noticed that the feed URLs generated by Redmine include the key necessary to grant access to the content. I am not too comfortable with this solution because I am afraid that users will pass URLs around causing a security issue.

It would be nice to have the possibility to use HTTP Basic authentication instead. Coupled with SSL, it is a simple approach that works with many feed readers and doesn't have the aforementioned issue. I am not particularly familiar with Ruby on Rails, but according to this blog entry[1], it seems like an easy thing to do.

[1] http://www.rorsecurity.info/journal/2007/10/18/http-authentication-and-feed-security.html