I’m testing out how cookie stealing works by copying my own cookies from IE (I use Mozilla, but IE is easy to test this with). Specifically, I’m taking the cookie that phpBB uses to store my password in, copying it to another machine, renaming it to match the Windows account I’m logged in under and seeing if it lets me authenticate to my own site. So far it does not, and I guess that’s a good thing, but my question is why does the above method not work?