Yes, I've been using encrypted cookies for years. If the user wants to use my website - they can store their own session data. The trade-off is extra bytes ove

Yes, I've been using encrypted cookies for years. If the user wants to use my website - they can store their own session data. The trade-off is extra bytes over the wire as the cookie is sent each same-domain request.