- Simple name/value pairs used to store state on the client.
- Cookies are set when the server sends a Set-Cookie header in a response.
- The browser sends the server the cookies back in the request headers.
- The server is only sent the cookies for its domain.
- Many web application platforms (JSP, servlets, ASP) use cookies for session tracking.
- Cookies have expiration dates after which they are no longer sent to the server.
- The total cookie header may not exceed 4K, and client sofware may have more restrictions.
- Due to security concerns some users turn off cookies in their browsers.
Next: Servlets and JSPs
Up: HTTP protocol
Previous: Request and Response
Contents
|