gx0r/connect-session-knex

Are session ids encrypted before saving?

Closed this issue · 1 comments

They should be encrypted before saving right? so in the case of a database leak session ids cannot be used.

gx0r commented

They should be, though encrypting a database is more of an operational concern and is perhaps outside of the scope of this library. I would consider a PR though.