We need SID format. Here are questions to be discussed: - do we need to store any info in SID? SessionId (from database), ServerId, UserId, etc. - do we need to use cryptography? - length and encoding