With Django 1.4 (or the dev version) it will be possible to cryptographically sign a cookie: https://docs.djangoproject.com/en/dev/topics/signing/ https://docs

With Django 1.4 (or the dev version) it will be possible to cryptographically sign a cookie: https://docs.djangoproject.com/en/dev/topics/signing/ https://docs.djangoproject.com/en/dev/topics/signing/ You can use this to store the session data with the user without having to consult a database and without fear that they will tamper with the id: https://github.com/ericflo/django-cookie-sessions https://github.com/ericflo/django-cookie-sessions