Can a signed Java applet manipulate cookies from other domains? (e.g., with JSObject)
A signed applet doesn't get elevated privileges in the browser so it won't be able to access the cookies. But it can read them from the disk if you know where to look.