title: Secure connection using SOAP
body: <p>I need to call a .NET SOAP webservice in a secure way. It must be secure in such a way that others can't call the WebService methods, and also it should not be possible for "the middle man" to understand the content of the messages.</p>
  
  <p>The caller will also be a .NET webapplication installed on another IIS.
  I can design the webservice methods as I want, so no restrictions there.</p>
  
  <p>I have been researching HTTPS/SSL with certificates, but I don't know if it actually solves my problems in a good way? For example, it would be anoying if the certificates has an expiration date, although it's not a showstopper in any way.</p>
  
  <p>So how would I go about this in a good way..?</p>
  
  <p>Thanks for any help.</p>