title: Are Oauth2 client apps required to have SSL connection?
body: <p>Which parties of Oauth 2.0 are required to have an SSL connection?</p>
  
  <ul>
  <li>Auth server: SSL required</li>
  <li>Resource server: SSL required</li>
  <li>Client apps: Is it really necessary, as long as it uses SSL for the resource server communication?</li>
  </ul>