News for hackers. Stuff that matters.
Re:Building Searchable Encrypted Databases with PHP and SQL by tyingq on Wednesday May 31, 2017 @09:01AM (#14452108)
Seems fair enough to me, though the article could do with a lead-in that explains what's being protected, the premise that the database server is a separate machine, etc.

Protecting the client side would be a completely different approach. Outboard/upstream tokenization or something. If it's directly serving up the sensitive data, there's no real way to leverage encryption for protection there.

Re:Building Searchable Encrypted Databases with PHP and SQL by CiPHPerCoder on Wednesday May 31, 2017 @09:07AM (#14452142)
> Seems fair enough to me, though the article could do with a lead-in that explains what's being protected, the premise that the database server is a separate machine, etc.

Okay, I've added a section that spells this out explicitly and unambiguously. https://paragonie.com/blog/2017/05/building-searchable-encry...