title: When using Microsoft's MVC, how do i enforce TLS/SSL bydirectional authentication for incoming requests?
body: <p>I'm writing a rest based api, for use when communicating between servers, and implementing some portions of it in microsoft's mvc.</p>
  
  <p>I'd like to make sure that incoming requests are:</p>
  
  <ul>
  <li>coming over https </li>
  <li>signed with a valid ssl certificate </li>
  <li>restricted to a known list of servers; ie. the certificate is issued to someone on my
  approved whitelist</li>
  </ul>
  
  <p>What is/is there a pre-defined method or pattern for implementing this kind of system, in the Msoft MVC/IIS stack?</p>