> Even then, you need to have fair amount of knowledge about networking, protocols, security, current software, vulnerabilities, etc.
...
> Encrypting client-side and using a managed solution is a compelling option.
You need a similar amount of expert knowledge to properly configure your client-side encryption, ensure the algorithm wasn't cracked, the implementation you're using doesn't have any severe vulnerabilities, etc.
If we're in a situation where we can trust no one, not even ourself, then we have a problem.
...
> Encrypting client-side and using a managed solution is a compelling option.
You need a similar amount of expert knowledge to properly configure your client-side encryption, ensure the algorithm wasn't cracked, the implementation you're using doesn't have any severe vulnerabilities, etc.
If we're in a situation where we can trust no one, not even ourself, then we have a problem.