Concerning the DoS issue: the system only allows one subscriber url per channel, so it really can't be used to DoS. And as for auth, this was designed for more

Concerning the DoS issue: the system only allows one subscriber url per channel, so it really can't be used to DoS. And as for auth, this was designed for more internal use where it isn't that much of a concern.