You should use Usersname/password and/or certificates (and https ofcourse)