Cookies Used to store state on user's machine GET... Browser HTTP Header: Server Set-cookie: name cookie name, content=value; Cookies with an domain =(who can read); expiration date is called persistent If expires=NULL: path =(who can read); cookies. cookie is deleted after expires =(when expires); browser closes. secure flag=(only over SSL) Browser GET Server Cookie:name =.. content 66 Cookies  Used to store state on user’s machine Browser Server GET … HTTP Header: Set-cookie: name = cookie name; content = value; domain = (who can read) ; path = (who can read) ; expires = (when expires) ; secure flag = (only over SSL) Browser Server GET … Cookie: name = … content = … If expires=NULL: cookie is deleted after browser closes. Cookies with an expiration date is called persistent cookies