I'm building a JavaFX 2.0 standalone application (it'll be distributed as an .exe) and it opens a connection to a MongoDB instance. The connection is just a standard Mongo connection using the Mongo wire protocol.
Is the Mongo wire protocol secure enough, or could users examine it to see the data being passed back and forth?
Mongo database connections will be able to use SSL at some point in the future, but that isn't available yet.
Instead, should I use a REST web service for data access with SSL? The direct database connection is quite a bit faster so it would be great if I could keep that, but also not have big security problems.