TLS where both sides present certificates: the server verifies the client too, so service identity is proven both ways.