ppl gotta stop thinking encryption in a db saves you from compromise. Its being very naive or ignorant. It only reduces your exposure to data leak very lightly

ppl gotta stop thinking encryption in a db saves you from compromise. Its being very naive or ignorant. It only reduces your exposure to data leak very lightly - in some circumstances, which are generally not even likely (like make a dump and post it publicly) Its like 'but it says AES on the box so its secure right?' and shouldn't be a thing among developers anymore. Obviously the database data has to be decrypted for the app to use it, and generally, you hack the app, not the db.