protect xml feed with password

[jamie]

hi,

we've been asked for the first time to provide inventory from our shop in xml format. as it is sensitive data, we would like to protect access with a password.

could this be as simple as placing the xml feed in a web-accessible location and protect using httpauth?

or would it be better to generate the xml feed to an internal server location and allow access via a port (and firewall rules) - in which case how could one password protect that?

or are there other ways?

many thanks :)

[macrost]

A lot of times, what is done is a person that is allowed access to XML will have an id number associated with an IP address. The id number will either be passed in the querystring, or in the XML itself.

[jamie]

hi macrost,

is it the case that most xml content is made available via a web-accessible location (like a news rss feed)? is this the norm?

thanks

[macrost]

Most of the XML feeds that I have come across are in affiliate programs, and they are secured with the affiliate ID number and the IP of the server where there requests will be coming from.

If you plan on having an affiliate program with an XML feed, I would definitely protect it, as you said because most of the data is sensitive.

[jamie]

many thanks macrost - i understand now.