If I encrypt a database on computer #1 that is already synced with computer #2 (in my case, with CouchDB), computer #2 gets the sync updates without having to type in the encryption password.
This leads me to believe the encryption is not being done on the server level.
Could someone please confirm?
I can confirm this.
The encryption is not being done at the server level (unless you’re using iCloud and I believe IBM Cloudant now is). But I also believe that IBM has the encryption keys whereas in Apple’s case I think it’s encrypted with your own password. I’m not 100% sure about that. So for CouchDB, you’d have to figure out how to encrypt that. If you’re running CouchDB on a Mac, you could just enable FileVault encryption.
Encryption in Tap Forms is provided at the local device level.