Hi,

I'm developing a web service for deployment over the Internet and I am now
looking at securing it. It only needs to be accessed from one client (in the
short term) and is never intended for widespread usage. As a starting point
I'm looking at Windows Authentication.

I've read that Windows Authentication over the internet is impossible as
it's dependent on a Windows OS being used throughout. Is this true or is it
just recomended practice to avoid limiting potential client base?

Both the server and the only client will definitely be running versions of
windows.

Any help would be greatly appreciated (just a yes/no answer would be a big
help too).