Cookies
Cookie Central
Do 'Cookies' Pose any Security Risks
Persistent Client State HTTP Cookies
RFC 2109
The Unofficial Cookie FAQ