I am considering using http-only cookies to store something similar to a session identifier. After the cookie is read by the server, it needs to be deleted.
My question is simply, is this possible? Can the server tell the browser to delete an http-only cookie?