Managing Your Users - The Next Step in Python Web App Security

Managing user session security can be a real bear in web development. How long is too long for a session ID to remain valid? Cookies are not good for security as other web apps can read them - not to mention viruses, etc. Instead, like SSL certificates, the best validation is to be found in independent factors. In the recent installment on web application security, some strategies for managing user sessions securely are addressed. For more, see "Configuration Management".