ASP Session Cookies

HTTP is a stateless protocol. This means HTTP servers would respond to each client request without relating that request to previous or subsequent requests. RFC 2109 introduced state management mechanism to HTTP.

This RFC basically introduced two header directives: Cookie and Set-Cookie. Set-cookie directive sets the session cookie and sends to the client browser indicating beginning of a session. From now on each request from this browser would contain Cookie directive in the header which indicates that the request is part of the current session.