webservice download vs simple http post dowload
<p>Here's the scenario,</p>

<ol>
<li>Design a service to allow file download. </li>
<li>File to be downloaded will be heavy and already signed/encrypted.</li>
</ol>

<p>I am looking for some direction/thoughts on the following:</p>

<ol>
<li><p>Develop a simple http post and secure the service by issuing client certificates and performing client certificate validation whenever a request is made to download the file? My concern is that it will impact the server performance since files are already heavy.</p></li>
<li><p>Use a pure webservice to accomplish the task and depend on WS-Security provided? Again, files are already heavy though I can use MTOM but it has its own dependencies.</p></li>
</ol>

<p>Guys, please provide some suggestions?</p>
