Session Store Design with NoSQL

Basho is pretty active about reaching out to developers who might benefit from trying Riak.  After doing a presentation on Amazon DynamoDB, Tim Gross was contacted by them and Tim decided to write an article about his experience creating a session store with Riak, DynamoDB and Redis.  

He actually ends up giving most of his praise to Redis and doesn't label one store as being better than the others. 

Redis is a great backing store for server-backed sessions. Client-side sessions have their place, but there are plenty of fairly bad client-side session implementations out there so do your research.

-- Tim Gross

You should almost certainly be using the HttpOnly flag and putting your whole site under SSL for authenticated users.
-- Tim Gross