We've set up a client-server communication with a partner. We host the server and the partner is the client. The specifications for this communication have been provided by our partner.
The specifications are as follow:
- TLS 1.2.
- 1 way SSL, so that the client knows that data is provided by the expected server.
- IP filtering, so that only authorized entities can access data stored on the server.
However, we also need to ensure that the entity retrieving the data is the authorized partner. So we are having some concerns about the reliability of the specifications provided.
Wouldn't a 2 way SSL + IP filtering be more appropriate in our case scenario ?