+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [Python] Some clarifications on flask sessions please (/showthread.php?tid=5845861)
Some clarifications on flask sessions please - TheSteel - Jun 7, 2018
I have spent some time reading about flask sessions and how secure/insecure they are. And my conclusion seems to be that flask session is not appropriate to store sensitive infromation. Now with that i ask the kind of secret ndrmation i am concerned with is related to a given user who is logged in to an app. I understand the user can be able to view flask sessions value stored as cookies on his/her browser as some sources point that they are never encrypted. I have no problem with the authentic user seeing session cookies values, however it could be a threat if another person access the cookies. So my question is does flask really secure the sessions from an outside attack or not because from my reading it seems that it is the user logged in to the app who the session is available to. So if my assumption is wrong what is the best way to store some crucial information needed for a a logged in user? 😶