Is there any point to encrypting database data??
If I have the tools to decrypt the data, e.g. AESDecrypt(str), why wouldn't somebody else who physically removed/stole the machine from the data room?
And why should one bother if they are perhaps already serving pages over an SSL browser connection?
Any ideas on this issue are appreciated.