User cookies User cookiesΒΆ Stateless HTTP requests are heavier Security risk (cookies can be altered) Cookies must be validated Cookies must be less than 4KB