Jonathan Neve wrote:

>But I think encryption could be very useful. Actually, now I come to
>think of it, this could even be used for an ordinary server
>configuration (not embedded). The best thing, IMO, would be to specify
>the key as a DB connection parameter. That way, only applications
>knowing this key would be able to connect to this database. Furthermore,
>the DB file could freely be exchanged from one machine to another, it
>would still remain usable only be an application knowing the correct key...
>
>
>

Ah, but sending the decryption key in clear compromises the encryption.
This is why I've been arguing that we need an end-to-end security
architecture before we start messing around with details.