Is it necessary to encrypt the correspondence?

Question

Information Security

I had never thought about it before, but after the recent story with the telegram, it became interesting.
There is a site of a social component. https protocol. Messages are stored in a database on the same server. Is it worth encrypting users' private messages if these messages do not go beyond their own server?

Answer 1

Drag the database - read the correspondence ... It's
easier - to encrypt the database itself (container file) with the built-in database tools (than the records themselves).
It is more correct - (plus to encrypting the database) to encrypt the important data themselves: records inside the database tables.
Well, it’s quite right - to add to the above:
1. encryption of your protocol for exchanging with the client (https is not a guarantee!)
2. encryption on the client.