I agree with your points. I'd consider encyption for non-key fields, like salary. However, I'd want to place the key management in someone else's hands. After all if I hold the keys, why bother encrypting?

Steve Jones

steve@dkranch.net