HTTP cookies (RFC 6265, State Management): set and read cookies safely from a server with Set-Cookie and Cookie, choosing Expires, Max-Age, Domain, Path, Secure, HttpOnly and SameSite, the __Secure- and __Host- name prefixes, sizes and lifetimes.