We have an app running where among other things people can send messages to each other. Obviously admins and content managers that have access to CMS can see what people are sending to each other. Is this usually encrypted and if yes, how, with what encryption?
The entire site is SSL encrypted, I'm specifically talking about admins being able to read users' messages between themselves. Sure, we can prevent certain admins to have access to that, but to be honest I would like to even hide it from the super admin with encryption. But then, in case one needs to read those for any purpose, how to decrypt them, how to structure the admin protocol for that?