On Tue, Jun 26, 2012 at 11:35 AM, V G wrote: > Yeah, this is why I'm considering using client-side AES256 encryption on > all first/last names. The rest of the data is useless if the names are > unknown. The only first/last name data leaving the client is encrypted > first. Name data is already encrypted when it reaches the database server > so no one can mess with it on the server's side. I believe you're in Canada? If so, you are going to run afoul of Canada's data privacy laws and medical information laws. Data can be mined for personally identifying information, see http://en.wikipedia.org/wiki/AOL_search_data_leak --=20 http://www.piclist.com PIC/SX FAQ & list archive View/change your membership options at http://mailman.mit.edu/mailman/listinfo/piclist .