Joomla provide the ability to add an update server allowing users to install an extension update when release at the click of a button.
This is of course great for free extensions, however for commercial extensions, one would run into a problem where someone could simply get the download URL from the update XML file and publish it, so this is a no go.
What I did have in mind, was doing something along the same lines, but it would simply notify the user that there is an update and they would have to go to the developer website and manually download it, however I didn't use any subscription extensions, thus there are no special permissions to get access to these commercial extensions. Instead I used a component that simply allows the user to purchase the extension and that's it.
So my question is, is there a built-in method that I'm unaware of that allows an update server for commercial extensions? I believe I remember this being discussed a long time ago, but not sure if anything was implemented into Joomla for it.
Or maybe instead, would it be an idea to prevent direct access to the XML if one types in the URL in their browser using a htaccess file?
Note: I'm referring to a module, else I might have looked into something like Akeeba Live Update