sknebeljgmac1106: subdomains are better for script/cookie isolation (e.g. you can define a cookie that is valid for only "sub.domain.com", but not one restricted to "domain.com/sub"), relevant if subdomains are controlled by different users or run apps of different trustworthyness
