Quote:
Originally Posted by Nookster
I have to add my input being a security guy. Using a key on the same server which is hacked to encrypt anything still doesn't solve a thing. A knowledgeable attacker will still be able to get access. There is no such thing as full encryption using a single server.  |
You are right, the key needs to reside on another server than the one the program is hosted on. Now you have weeded out most every hacker on the planet. No key at all, or un-encrypted information is destined to be a hackers target. I am sure we can agree to that.