HTTP Cookie

Make HTTP messages carry state

Created by server and stored in browser

If no domain is explicitly specified for a cookie, it defaults to the domain of the server that sent it. Cookies are vulnerable to attacks and pose a risk of information theft, so they should be used only when their speed or convenience is necessary.

The term comes from “magic cookie,” which refers to a packet of data that a program receives and returns unchanged. Cookie attributes store information such as expiration, domain, and flags like Secure and HttpOnly. In

MSA, cookies are convenient when moving across different subdomains.

HTTP Cookie Notion

Total Cookie Protection

HTTP Cookie Usages

Session Cookie

Persistent Cookie

Inside Google's Plan to Kill the Cookie

To replace the cookie in Chrome and Android, Google has an offering for the world called “Privacy Sandbox." Here's an exclusive peek into how it will work.