Implementing security in Map services

[sheebaashraf]

I have a flex application running on one http address say http://www.abc.com and it's public website. My map services are hosted on other domain. I want to implement security so that my
1. Map services should be accessible to only my application www.abc.com.
2. Nobody should be able to access map services directly as I know user in the browser can see the map service URL through tools like firebug in mozilla and can past that same URL in browser and can use our service.

Now I think I can secure using.
Enable security at arcgis manager and create proxy service and allow restricted access in cross domain xml file.

1. Do I need to create any HTTPS service? or my problem will get solved by using http.

Please provide your input

[BjornSvensson]

I think enabling securing on your ArcGIS Server should be enough in this case.

[sheebaashraf]

Thanks for your response.

I will add more scenario to it.
1. I want my developers to access this Map services. On thing that is very important my developers are not at one single location. they work from different regions.
2. In future there are chances that more website will consume these Map services.

Please provide your inputs.