title: DocuSign Connect X.509 Certificate Authentication/Security
body: <p>How do I secure my DocuSign Connect https listener so that only requests from DocuSign are accepted?</p>
  
  <p>I have read the Connect service guide and am uncleared on whether the following setting can be used for this purpose:</p>
  
  <ul>
  <li><p>Sign Message with X509 Certificate</p>
  
  <ol>
  <li>Does this setting apply to both the SOAP and HTTPS listener interfaces?</li>
  <li>Can this setting be used to secure my listener so that only DocuSign requests will be accepted?</li>
  <li>How do I set up my service to validate the signed message as valid?</li>
  </ol></li>
  </ul>