XSS with encrypted cookie?

["pire pire" <pirepire69 () romandie com>]

Hi,

I'm wondering if it's possible via a XSS attack to steal an 
encrypted cookie (actually it's a session token)? (with some 
javascript like: document.cookie etc...)

If yes, is it also possible to replay this cookie? (of course the 
session must still be valid on the server)

I know it works with regular cookie. 

Thanks a lot for your help



_______________________________________________

La messagerie gratuite des romands : 10 MO !!!
Profitez-en ! >>> http://www.romandie.com

---------------------------------------------------------------------------
----------------------------------------------------------------------------