[swiley]

Shared secret authentication is pretty much always a bad idea. I'm continually shocked people still use it.

[asaddhamani]

So what is the better option according to you?

[swiley]

Some kind of PKI, probably with an organization wide CA.