4 ms·

You get to set the domain when setting cookies so its not a huge issue either way.

• underdesign 16y ago
  Usually, but some browsers won't accept forged cookies. It'll only accept cookies from the domain it requested from.