HTTP cookies

One of the fields of a standard cookie is called “domain.” This field is checked by Web browsers to ensure that a returned cookie is from the originating domain. If it is not, the browser drops the cookie. This scenario arises when you are using the Web redirector because the server and redirector might be on different domains. For example, if the client makes a connection to the redirector on domain a.b, which then redirects to a server on domain c.d, by default the server creates a cookie with the domain set to c.d. When the client receives the cookie from domain c.d, it expects it to be from domain a.b, so drops it. Cookie generation uses the domain set in the httpDomain property.