title: What is the risk of someone eavesdropping on a webservice when it's being called by its own server?
body: <p>Our company website is made up of several .NET projects all on the same server in addition to the big main site in ColdFusion. To reduce code duplication we wrote a webservice that these projects can call for basic functions. For example we have a service were you give it a user ID you get back some information about the user (no passwords, but things like an address). What I am concerned about is someone poking their electronic nose in and catching some information we don't want them to have. Is this a valid concern or will the information from the webservice stay internal since it and the projects calling it are on the same server? </p>
  
  <p>So our webservices are all like www.companyname.com/webservices/webserviceuser.asmx and the .NET web projects are all like www.companyname.com/admin/project1/ or www.companyname.com/edituser/ Since they all share the same domain name, will the information get out to the general internet?</p>
  
  <p>Also is it possible to add security to the webservice to confirm that the caller is an internal application (even if it's just testing the URL of the page calling it)?</p>
  
  <p>Thank you in advance.</p>