In a system with well-known end-points, using WS-Addressing and WS-Security with X509 certificates is a great way to authenticate web services, and ensure that the messages are from the right people and have not been tampered with. The basic setup can be implemented very quickly if you're happy with the default way messages are passed, but when you have other requirements such as changing the digest...