- Server sets cookies by sending back a 'Set-Cookie' header
in the HTTP response.
Set-Cookie: name=value; expires=date;
- Cookie have an expiration date, or can be specified to only be valid
for the current session.
- Cookies can also specify domains for which they are valid (will be
sent to the client.