3 ms·

Implement cookie expiration server-side.

• jessaustin 13y ago
  Would anyone be tempted to do this "client-side"? What would that even mean, besides what the browser does automatically? Or are we just saying, "don't trust that the client won't send expired cookies"?