From 8ac9c84bddcba096ec77b622686a532be3e9d54c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Martin=20Ha=CC=88cker?= Date: Tue, 13 Aug 2019 09:10:17 +0200 Subject: [PATCH] Document suggested alternatives. --- README.rst | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/README.rst b/README.rst index e855426..e5bbc88 100644 --- a/README.rst +++ b/README.rst @@ -8,4 +8,9 @@ ripoff of Jim's Packless bsddb3 storage. **Please note: Usage of this package is deprecated, as it is known to randomly loose data, especially with Zope 4.** -For details see: https://github.com/zopefoundation/tempstorage/issues/8 +For a detailed discussion see `#8 `_ as well as `#12 `_ + +To replace server-side sessions, cookies are probably your best bet, as these also get rid of any denial of service problems that server side sessions are vulnerable to. + +If you need server side storage of sessions, consider using a normal store rather than tempstorage for your session data. +For details and suggestions see `this discussion in the pull request `_ as well as the discussion in the aforementioned bug reports as well as `the discussion in Zope about the removal of the generated configuration `_.