4 ms·

> If you keep using plain sessions you got a SPOF What single point of failure is inherent with plain server side sessions and a session cookie?

• ratherbefuddled 7y ago
  The server.
  • stephenr 7y ago
    ... ok so assuming you then don’t have a HA environment (Really!?) if the server is down the sessions and the tokens are irrelevant because there’s nothing being served and nothing to use/check them and provide back resources.
  • james_s_tayler 7y ago
    You don't have to store them purely in-process. The session data itself can live in Redis. You can scale sessions beyond a single web server.