The stuff that should encrypt, should have the keys. That is how easy it is.
Personally I think the web server should do the encryption. As it is the part of the software that contains the sensitive information, AKA the content.
You can get new keys you can't get new content.
Personally I think the web server should do the encryption. As it is the part of the software that contains the sensitive information, AKA the content. You can get new keys you can't get new content.