1. In a system comprising a server and a computer communicatively connected together via an HTTP-based network, a method of establishing by the server a secure state between the server and a user operating the computer, said method comprising: encrypting, using a cryptographic key, user data; embedding, into the encrypted user data, key data comprising one of the cryptographic key and reference data associated with the cryptographic key; storing, in a cookie, the encrypted user data having the key data embedded therein; naming the cookie by storing name data in the cookie; sending the cookie to the computer for storage thereby; receiving the cookie from the computer; extracting, from the cookie, the encrypted user data having the key data embedded therein; extracting, from the encrypted user data having the key data embedded therein, the encrypted user data and said key data; decrypting, using said key data, the encrypted user data; and establishing the secure state between the server and the user based on the decrypted user data.