[cynwoody]

End-to-end encryption works. It's a little extreme for most people, and there are all sorts of gotchas in implementation to worry about, but if you have the need you can afford the solution.

This is true. You just have to make sure the wrong people don't find out the pass phrase.

[cryptical]

All part of the implementation :)

Key management, tokens for authentication, hardening systems and auditing hardware and software regularly, etc.

There was that mob boss that was using encryption out on the east coast. Got busted when the FBI did a black bag job on his home PC, pursuant to a wiretap warrant and got his passphrase.

The problem for the perp in that scenario is that when they get the passphrase for the key, all the traffic sent using that key is compromised. It costs next to nothing to store a bunch of encrypted traffic forever if required, hoping that a key turns up in the future.