Php4 Session Data Format

Hi all, I was thinking about the fact that php4 session data is stored essentially in plain text ( by default ). I realize that the session store ( whether it be files / db / shmem etc ) can be protected to minimize the access of snoopers, but I wondered if it would be worthwhile encrypting the data by default. I am considering brutalizing my custom Postgres session handler to see if I can include this sort of thing ( maybe using mcrypt ..? ), but thought the encryption issue was worth raising even for the default handler.... regards Mark Kirkwood mark.kirkwood@hnz.co.nz