Yes but instead of passing the user name and password on each request you pass an id, also you can have the login call being done via SSL to protect the user name and password.

>>Michel you can not store a cookie from a web service, what I'm talking about is to simulate that. Has I said you first must login and that login returns a cookie/key/id whatever you want and all the next calls must pass that cookie.
>
>We're back to square one. We still have to pass something for each request.