souleman,

Thanks for the reply. That's not exactly what I was asking, perhaps I worded the question incorrectly. I was trying to say that if someone obtained my cookie for yahoo, and they didn't know my U/N or P/W, is there still a way for them to use the info in that cookie to impersonate me, or decrypt the info and get my U/N - P/W in plain text...does that make sense?
Thanks again.