What is said above is pure nonsense. Ensuring server security has nothing to do with webservice security. If you want webservice security, you must first ensure the security and accuracy of data during webservice transmission. Data can use specific The encrypted format is then decrypted and compared when the request is obtained.

The webservice can also authenticate the identity of the requester. You can use WS-Security. The principle is to add things to soap, and then the server parses it. soap,

2: Use certificate,