4 ms·

This. I don't get why browsers allow long term cookies by default. Session cookies should be allowed by default, but "normal" cookies should be off by default.

• e1ven 16y ago
  I'm not sure how you know the difference between a session cookie and "other" cookie from a technical level. You could do a per-cookie approval, but that gets tedious quickly.
  • jrockway 16y ago
    A session cookie is a cookie that is sent without an explicit expiration time, and is explicitly specified to be so in the standards.
    • e1ven 16y ago
      Sorry, you're right. Wasn't thinking properly.
• stanleydrew 16y ago
  How would you determine what is a session cookie and what is a long term cookie? Expiry time?