SSL Session

Hi, everyone.

I would like to understand more about the SSL session in the framework.

How are the session ID and other data encrypted? in Cookie, URL or others?

Is the session cookieless?

Thanks.