lcamtuf's blog: HTTP cookies, or how not to design protocols
All these moves led to a very interesting situation: there is simply no accurate, offcial account of cookie behavior in modern browsers; the two relevant RFCs, often cited by people arguing on the Internet, are completely out of touch with reality.

No comment on this link yet.