I am creating an app in android. It will be calling a webservice to fetch some confidential info. I need to verify that the user is authenticated to access the info and the service shouldn’t be called from any other source even if the user has all the required credentails to access the service.
What should be used to ensure the security…. REST or SOAP?
For security you should use SSL with client authentification and possibility to revoke cvlient certificates (though not every appplication server will support this). SOAP or REST do not have differences in this context.