title: Is the Spring Social OAuth dance with Facebook secure?
body: <p>I'm making use of the Facebook Spring Social library.</p>
  
  <p>Is the OAuth dance between the Spring Social library and Facebook when connecting secure (against man in the middle attacks etc)? If not, what do I need to do to make it secure?</p>
  
  <p>The reason why I'm a bit concerned is that the <a href="http://static.springsource.org/spring-social/docs/1.0.x/reference/html/serviceprovider.html" rel="nofollow">Spring docs</a> mention that Facebook uses OAuth 2 and I believe OAuth 2 has been simplified, where it relies on HTTPS to secure the OAuth dance.</p>
  
  <p>P.S. my web app runns on HTTP</p>