To muggles it can be explained line this: computers send letters to each other. Getting a webpage is sending a letter that says “can I please GET the document you call /mypage?”, where the other part replies “OK (200), by the way, next time you write, please include this token “<cookie>“, here is your document”.
When I send the next letter, I (or my user agent) can chose to send along the cookie, or not. The server does not force me. This is why the EU cookie law regulating HTTP messages makes no sense.
When I send the next letter, I (or my user agent) can chose to send along the cookie, or not. The server does not force me. This is why the EU cookie law regulating HTTP messages makes no sense.