--- securesite_old.module	2008-05-28 09:16:00.000000000 +0200
+++ securesite.module	2008-05-28 09:19:26.000000000 +0200
@@ -250,11 +250,15 @@
     unset($GLOBALS['user']);
 
     $securesite_enabled = variable_get('securesite_enabled', SECURESITE_DISABLED);
-    if ($securesite_enabled == SECURESITE_AUTH || $securesite_enabled == SECURESITE_AUTH_ALT) {
+    if (($securesite_enabled == SECURESITE_AUTH || $securesite_enabled == SECURESITE_AUTH_ALT) && !empty($_SERVER['PHP_AUTH_USER'])) {
+      // Only clear the authentication if the user had an authentication already.
+      // If the user did not have one (eg. authentication was limited to certain
+      // paths only for RSS feeds), then we should not pop up an authentication
+      // dialog.
       securesite_user_auth();
     }
     else {
-      // redirect first to browser prevent caching problems
+      // Redirect first to browser to prevent caching problems.
       securesite_goto();
     }
   }