Baseline — No Encryption
On user's device Unprotected
Client
Server
Storage
Network
Network
Visible to user
(expected)
Exposed to
network attackers
Exposed to
service provider
Exposed to
network attackers
Exposed to
service provider
With Encryption in Transit & at Rest
On user's device Unprotected Encrypted
Client
Server
Storage
Network
Network
Visible to user
(expected)
Protected from
eavesdroppers
Still visible to
service provider
Protected from
eavesdroppers
Protected from
data breaches