Cookies MONSTER your security, even with encryption

HTTPS is secure, but cookies are rubbish, warns CERT

A whole lot of work rolling out HTTP security is being undermined by bad browser implementation that facilitates man-in-the-middle attacks."