title: Client server communication between android app and server
body: <p>I am building an android application which communicates with web server for authentication, and getting data from server. I am using HTTPS/SSL for communication using self signed certificate on the server and allowed that certificate in the android app . In this way i am sure that I am talking to a correct server. But how to make sure that server is getting a request from the right client. </p>
  
  <p>What if I spoof the http request from the browser to send to server ? </p>
  
  <p>How can server know whether it is getting request from the android application , is there any way to restrict server from handling requests only from the mobile app ?  </p>