I have a desktop application with JavaFX and I need to connect it to the server in a safer way. Right now, the program connects by mysql and FTP without TLS.
I've thought to connect it by VPN, but the clients have the Java application installed on their personal computers and I can't control the end device security.
Is it dangerous for the server to use the VPN method and install the VPN keys on their computers? If it isn't safe, could you guys recommend other options?