In ASP.NET, I\'m a bit confused about role of cookies in session state. Whats is the difference between normal session state and cookieless session state?
ASP.NET is able to modify relative links found within the page and embed the Session ID in the URLs instead of storing it in a cookie.
Thus, as long as the user follows the path of links the site provides, session state can be maintained without using cookies. However, if the end user re-writes the URL, the session state instance will most likely be lost.
Further reading: