> Seems fair enough to me, though the article could do with a lead-in that explains what's being protected, the premise that the database server is a separate m

> Seems fair enough to me, though the article could do with a lead-in that explains what's being protected, the premise that the database server is a separate machine, etc. Okay, I've added a section that spells this out explicitly and unambiguously. https://paragonie.com/blog/2017/05/building-searchable-encrypted-databases-with-php-and-sql#our-threat-model https://paragonie.com/blog/2017/05/building-searchable-encry...