When is secret required?

[jerfer]

Is the session secret only required when storing the session in a cookie, or do the external storage methods also encrypt the session prior to storing it?

[bungle]

@jerfer yes, data stored in external storages is also encrypted.