Spline Properties Mongodb URL about spline

[vackosar]

I think we should also provide option to read these from environmental variables. Right now you can still do that passing them through jvm props:

    -Dspline.persistence.factory=${USER}:${PASS}@... 

I don't think most of other programs provide other options. Do you have any other suggestion?

[wajda]

How would you solve this issue? I don't think there is a way to make it properly secured on a shared server box. Even if you encrypt a password the server would need to decrypt if somehow on the startup, so there must be another "master" password stored somewhere in a plain text anyway, and so on. Adding more encryption stages won't make it more secure as long as the tail is outside of the hole. I would say that securing MongoDB connection should be done on other than app levels. E.g. encrypted hard drive, secured network or other authentication methods that don't involve sending a plain text passphrase to the server.