
Originally Posted by
grantek
Yeah, that's what I was getting at - unless the app retrieving the feed is the user's web browser, there's nothing to link a forum cookie with the news app. You could link it by IP address (like many private bittorrent trackers do), but that would authenticate everyone behind a NAT, and it still doesn't cover external news aggregators like Bloglines. The only way to cover that would be to serve the actual ads yourself via a script that doesn't serve anything if the user is logged in.
Or you could use some sort of per-user GET authentication in the URL, but that's basically plaintext and could easily leak inadvertently.