There's a great post
at The Healthcare IT Guy's blog on the differences between encryption and
application security. With the proliferation of browser based thin
clients and the adoption of technologies like AJAX, appropriate
security means more than just SSL encryption.