title: Is there a way we can encrypt express-session cookies?
body: <p>The cookies stored by <strong>express-session</strong> are only singed and it doesn't seem secure at all. The cookie is stored in this manner '<strong><em>s:sessionID.singedData</em></strong>' but can I use AES256 encryption or any other encryption format so that it adds a layer of security to the cookies stored once we go into production. I have the means to encrypt and decrypt data but I am not sure where exactly to do it. I once tried to encrypt the cookie which was successful but I wasn't able to decrypt it because I couldn't find the relevant function in <strong>express-session</strong> source (BTW I was over-ridding the <strong>express-session</strong> module code.)</p>