[Freeswitch-users] general question about phone provisioning

This question is not specific to FreeSWITCH, just a general question that I would like to get feedback from other FreeSWITCH users. I'm thinking of setting up phone provisioning via http, my question is how to make this setup secure. say my provisioning server will listen on https://myserver.com and a phone with the mac address 00-15-65-22-F4-23 will try to pull the config as https://myserver.com /00156518425Dhow do I prevent hackers from trying to get config files using a brute force attack. is there any standard way of securing against these types of attacks?