Enrique Catalan,
Regarding secure cookies, perhaps Dave Bauer can report: https://openacs.org/forums/message-view?message_id=1509515
Beyond that, your questions seem valid. Hopefully someone with experience working on this will answer your questions.
cheers,
Torben