Password set in config.xml can remain in plain text in development mode. Production mode require the password to be hashed, or else it will not start.
Default SSL Keystore can be used in development mode. You will receive a warning if you attempt to use it in production mode.
Auto-deployment directory is disabled in production mode.
Default values for several parameters/facilities are larger.