I'm working on an web application in HTML5 using a service worker and one of the requirements is to work offline.
In order to achieve offline functionality we are storing all the application data required in indexeddb. The issue I think we have is that all of the application data is essentially personal information. I've read that sensitive data shouldn't be stored in indexedb.
When it comes to offline functionality if you can't use indexedb where are you supposed to store such information if you have to store it client side? And I assume client side encryption would be pointless as the client would have to decrypt it?