While I was complaining about issues with RSS feeds in Mantis, Michael had already submitted a patch which fixes that: it adds auto discovery to the issues page and uses a secret identifier to access Mantis; there is no need for the user to supply her credentials. A little tweak of his here and there, and it works like a charm.