The article mentions rssCloud. From a cursory glance it sounds like that's a protocol extension that lets you register a callback URL to be notified about updates (i.e. push messaging).
Based on my reading of rssCloud it seemed to lack a verification step so I'm glad to see the WebSub spec explicitly mention that. Without verification this seemed like an easy way to trick a server into sending random HTTP requests to third party services.
