At least with the use of a digital signature and nonce you can guarantee that the request hasn't been tampered with!