What's the appropriate point to create and assign cookies to the current response? Can it be done at any time, or only during the render-response phase? Does it have to be done before anything else is rendered in the render-response phase? Could it be done by a post-processing servlet filter, or is that too late?
Reading cookies in JSF appears to be trivial, but writing them out doesn't seem to be so easy. :-) The only example I've found is tree2, and it generates the cookies in javascript, so it's not helpful.
