Please visit http://lcamtuf.blogspot.com/2010/10/http-cookies-or-how-not-to-design.html http://tools.ietf.org/rfc/rfc2965.txt http://www.ietf.org/rfc/rfc2109.txt