I've set up a specific subdomain on my server for static content -- images.example.com
I'd like to configure Apache to never let cookies be set on that domain. But I'm not sure where/how to do that. Please advise :-)
Using mod_headers (http://httpd.apache.org/docs/2.2/mod/mod_headers.html) you can manipulate all headers that Apache sends to the client. Something like
Inside the VirtualHost of your subdomain should do the trick.
I don't think apache can be the enforcer here. Even the RequestHeader unset option above will only happen after the client has sent the request with the cookie.