The DSN builder rejects sslmode=require (driver/postgres dsn.go), so the postgres session store only runs over cleartext — a trusted-network-only posture. Support TLS to the backend so a session store stops persisting sensitive data in the clear, and revisit the store default.
The DSN builder rejects sslmode=require (driver/postgres dsn.go), so the postgres session store only runs over cleartext — a trusted-network-only posture. Support TLS to the backend so a session store stops persisting sensitive data in the clear, and revisit the store default.