Release It!: Design and Deploy Production-Ready Software (Pragmatic Programmers)

by Michael T. Nygard

Serve small cookies Use cookies for identifiers, not entire objects. Keep session data on the server, where it can’t be altered by a malicious client.