I can't think of a good reason to have a cross domain cookie. If foo.com is a partner of bar.com or whatever, and you have to login twice that seems reasonable.
Having the cookie be just a hash for a session id sounds smart.
I don't know much about website development. I know basic HTML, and I've had to interpret and modify bits of javascript before. That's about it.
(post is archived)