Secure Cookies: Recommendation of Expires vs Max-Age?

[cycomachead]

MDN URL

https://developer.mozilla.org/en-US/docs/Web/Security/Practical_implementation_guides/Cookies

What specific section or headline is this issue about?

Solution

What information was incorrect, unhelpful, or incomplete?

The text includes the line:

Expires is preferred unless you need to support IE < 8, in which case use Max-Age.

Given the benefits of Max-Age, should this sentence not be reversed?

What did you expect to see?

I thought Max-Age was the preferred form of setting a cookie's expiration date.

Do you have any supporting links, references, or citations?

No response

Do you have anything more you want to share?

No response

MDN metadata

Page report details

• Folder: en-us/web/security/practical_implementation_guides/cookies
• MDN URL: https://developer.mozilla.org/en-US/docs/Web/Security/Practical_implementation_guides/Cookies
• GitHub URL: https://github.com/mdn/content/blob/main/files/en-us/web/security/practical_implementation_guides/cookies/index.md
• Last commit: be3f184
• Document last modified: 2024-12-17T23:24:43.000Z

[Josh-Cena]

We don't even need this sentence at all, since we don't care about ancient browsers anymore.