Mark O'Donohue wrote:

>Jim Starkey wrote:
>
>
>>Jonathan Neve wrote:
>>
>>Ah, but sending the decryption key in clear compromises the encryption.
>>This is why I've been arguing that we need an end-to-end security
>>architecture before we start messing around with details.
>>
>>
>>
>
>Embedded is a lost cause from a real security perspective.
>
>

If the database file is encrypted and reasonable key management is in
place, it can be made secure. That said, I don't think anyone is likely
to want to do anything with encrypted files except talk about them, but
I'm usually wrong about this sort of thing.

>
>

[Non-text portions of this message have been removed]