title: ASP.NET, WCF: how can I authenticate a calling application? Not the user, the application itself
body: <p>For a few reasons, the bunch I'm working for don't want to use certificates and don't like the idea of a service that can be accessed by anybody with a valid logon.</p>
  
  <p>My question is how can I authenticate an application as being an official application suited for use with these wfc services without using certificates? </p>
  
  <p>They are trying to avoid a situation where inquisitive customers are clever enough to retrieve the service calls and have enough infrastructure to build their own clients to use them.</p>