Cookies, Cross-site Scripting, etc..

This blog:
http://lcamtuf.blogspot.com/2010/10/http-cookies-or-how-not-to-design.html
has the most succinct description of cookies and the problems with web browsers that I have ever seen.