I am having a debate w/ a co-worker about this.

I remember reading that session variables are cookies on the server.
does anyone agree w/ me?

got any links on this subject

thanks