I'm work on setting up a MariaDB local instance on laptops that will spend most of their time disconnected/unable to connect to the internet.
One of the requirements of the project is to encrypt the local instance of the data. which is hosted on a central server and replicated out to individual nodes when they reconnect to the internet.
I have set up MariaDB's Data at rest encryption using the file key management plugin but it's a little disconcerting that the keyfile is available on the local machine. What alternatives are available; besides having the front end app encrypt the data before inserting it into the db?