From what i understand you have a desktop application and this app require to authenticate on server using the WebClient and an URL. The users that run the app don't know the URL but they can use a free program like Fiddler to monitor the requests and they can find the authenication data.
In this case what you can do is to send the private data encrypted and decrypt her on your server. Just you, the programmer will know the encryption alghoritm.
|