My understanding is that the entire connection is encrypted using SSL when this is enabled. The MySQL server must have been compiled to support this option or it will not work. You can also set up X.509 based certificate authentication in addition to passwords, I believe.
Note that I have not done much with SSL in MySQL so I could be wrong, someone please correct me if this is the case!