Difference Between Cookies and Sessions

Cookie

1. Cookies can store only "string" datatype
2. They are stored at Client side
3. Cookie is non-secure since stored in text format at client side
4. Cookies may or may not be individual for every client
5. Due to cookies network traffic will increase.Size of cookie is limited to 40 and number of cookies to be used is restricted to 20.
6. Only in few situations we can use cookies because of no security
7. We can disable cookies
8. Since the value is string there is no security
9. We have persistent and non-persistent cookies

Session

1. Session can store any type of data because the value is of datatype of "object"
2. These are stored at Server side
3. Session are secure because it is stored in binary format/encrypted form and it gets decrypted at server
4. Session is independent for every client i.e individual for every client
5. There is no limitation on size or number of sessions to be used in an application
6. For all conditions/situations we can use sessions
7. we cannot disable the sessions.Sessions can be used without cookies also(by disabling cookies)
   
8. The disadvantage of session is that it is a burden/overhead on server
9. Sessions are called as Non-Persistent cookies because its life time can be set manually