Standard/RFC for HTTP sessions?

Sorry for answering my own question, but as it typically goes, you spend lots of time trying to find out something yourself and when you finally ask someone else, that is the point when you find the answer yourself.

The original RFC for cookies is 2109 which was superseded by 2965 which in its turn was superseded by RFC6265. RFC6265 talks about sessions and session identifiers.

https://datatracker.ietf.org/doc/html/rfc6265