Whenever possible, the goal is to
encrypt files at rest, in motion
(think email) and especially on
mobile devices.