HTTP Cookies (RFC 6265)

1. Overview and examples

   Basic cookie model with Set-Cookie and Cookie headers.

2. Set-Cookie header

   Cookie attributes: Expires, Max-Age, Domain, Path, Secure, HttpOnly.

3. Cookie header

   How user agents send stored cookies back to servers.

4. Domain and path matching

   Domain-match and path-match algorithms.

5. Storage model

   How user agents store, evict and replace cookies.

6. Server requirements

   Selecting which cookies to attach to a request.

7. Security considerations

   Ambient authority, session fixation and cookie confidentiality.

8. SameSite and updates (RFC 6265bis)

   Updated cookie spec with SameSite, __Host- and __Secure- prefixes.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.