6.3.8 Identifying web service callers without authentication

Establishing the identity of the caller to a web service can also be accomplished without formal authentication by including, for instance, the DDEX Party Identifier (DPID) of the web service caller into the URL syntax. However, using this approach the recipient web service cannot be certain that the caller to the web service is the entity it claims to be.