Flask client-side sessions

Question

Starting to learn Python\'s Flask web app framework, still on the learning curve, so please bear with me.

I am wondering how appropriate are the client-side sessions for

Answer 1

• I don't think you have to worry about the size as a cookie can't store more than 4KB of data anyway. I highly doubt you'll get anywhere close to that easily.

• It's just as secure as other sessions, as in you can probably take the PHPSESSID cookie to some other browser and have it work just as you can do it with this. Nothing prevents it. However there are workarounds this issue, you can have it expire after a time limit. See this question for example. It has useful answers regarding this issue.

You can always use a database session if you so desire. I'm sure there are other implementations you can find too.

Edit: Here are some others.