[getcrunk]

What’s wrong with using signed urls and encrypting the object with a unique per user key. It’s adds some cpu time but if it’s encrypted it’s encrypted.

* this obviously assumes the objects have a 1-1 mapping with users