I have found a lot of definition of application layer encryption through Google but none of them is giving a concrete example of how to do it in web application.
The following post says encrypt the data is only view able in your applications memory space. Transport Layer Encryption vs. Application Layer Encryption
What does it actually means when let say I am building a banking web application. How does it perform application layer encryption?
- Is there any difference on client side or server side?
- Does encryption in database considered as application layer encryption?
- If I implemented application layer encryption, does it add another layer of protection from MiTM attack if https / CA is compromised?
- Where does encryption and decryption take place?
It will be really helpful if someone can clarify it. I have experience with building web application in RoR, Django and nodejs. Any examples will help.