FYI, that extension can still leak cookies on the first request because of limitations in Chrome's extension API. See the page you linked for more details.
So basically what I am trying to say I guess is this: Fuck Telus!!!!!!!
I think I picked that up by paragraph #2...
Did you miss the '(with compression)' part? The SSH solution squashes everything, without special treatment for anything (lossless images).
Use ReplayOnTop instead (Vista only?)
The images expire intermittently.
Http Referer checking sounds like a "works for most" solution.
Math is like love -- a simple idea but it can get complicated. -- R. Drabek