This week's book giveaway is in the OO, Patterns, UML and Refactoring forum. We're giving away four copies of Refactoring for Software Design Smells: Managing Technical Debt and have Girish Suryanarayana, Ganesh Samarthyam & Tushar Sharma on-line! See this thread for details.
As far as the HTTP standard is concerned, rfc2109 is what you need. As far as the Servlet API is concerned, the JavaDocs for javax.servlet.http.C o o k i e give the number of c o o k i e s a browser is expected to handle per web server address.