On: You are dangerously bad at cryptography

[lifeisstillgood]

I completely agree with this and have just released a session-cache for python that completely ignores encryption and just stores uuid in a cookie, and relies on server side lookups for session work.

[kbaker → lifeisstillgood]

Make sure you are using HTTPS exclusively so you aren't vulnerable to Firesheep-style attacks.

[lifeisstillgood → kbaker]

That's in the docs :-)

Ooops no it's not - kind of assumed it was obvious - thank you for the reminder :-)

[lifeisstillgood → kbaker]

That's in the docs :-)