A method and system are disclosed for providing secure communications with a communication appliance such as an IP telephone, wherein such an appliance has a reduced risk to attacks by unauthorized or rogue applications. In particular, “denial of service” and “man-in-the-middle” attacks are prevented. One embodiment establishes authenticated and encrypted communications with a single IP server for transmitting and receiving substantially all IP application communications with third parties.