On Fri, Dec 18, 2015 at 10:55 AM, Török Edwin <edwin+ml-ocaml@etorok.net> wrote:
>
> The library ships with an in-memory backend (for development and testing) and a postgresql-ocaml[0] based backend.

How about signed cookies as a storage backend?
Python Flask and Django can use it to store session entirely in the cookies with an hmac signature and expiration time, so your server can be entirely stateless.
As long as the amount of data in your session is small, and all you need is authenticated data (and not secret data) I think its quite an elegant solution,
and more fitting with a functional style.

This is interesting. As far as I can tell, it should be possible to implement this as a backend without any modifications to module signatures. 

Now of course comes the question Cryptokit or nocrypto :)

That decision, for better or worse, has already been made by ocaml-session: it uses nocrypto to generate session keys.

-Spiros E.