It seems like a solvable problem. Why don't they let webmasters implement some kind of time-based cryptographic signature?
It seems so lame that his problem has gone on so long, especially when there must be some kind of technical solution.
For real businesses spending a few days implementing some authentication protocol would not be particularly burdensome.