well, the term is at rest. so an index in memory is probably not encrypted, just as they decrypt the data to be send over the wire (also encrypted, e.g. via HTT

well, the term is at rest. so an index in memory is probably not encrypted, just as they decrypt the data to be send over the wire (also encrypted, e.g. via HTTPS, which I think the SDK uses under the hood). this isn't a big deal since sensitive/user data usually is a terrible choice for a key. (you get hot spots.) but i'm sure there's someone out there using SSNs as a key...