I would add just a couple of things.

First, the cookie can only be read by the originating domain.  That said, cookies can be shared between sub domains.  See the following:

http://www.15seconds.com/issue/971108.htm