While I was reading about session hijacking articles, i learned that it would be nice to encrypt session id value that is stored in a cookie.
As far as I know, when I s
It makes sense to encrypt cookie data when you use cookies to store sensitive info. that only the server should read (decrypt).
There's no reason to encrypt session id, since the hacker can use that encrypted session id to impersonate his victim.