Tag
cookies
- Sep 21, 2026 Sharding Session Data and the Size Ceiling How session keys are partitioned across nodes as the store grows, why resharding is safer at a partition layer, and what a large cookie costs on every request. backend systems
- Apr 24, 2026 Cookie Scoping, SameSite, and the Site Boundary How cookies are addressed by host and path rather than of origin, what SameSite Lax and Strict actually permit, and where domain-scoped cookies leak across unrelated applications. web platform
- Jun 24, 2025 Cookie Scope, Attributes, and Transport Rules The exact matching rules that decide whether a browser attaches a session cookie to a request, and how Domain, Path, Secure, HttpOnly, and SameSite narrow that decision. backend systems
- Nov 23, 2024 How a Session Identifier Binds Requests to Server State What the opaque string in a session cookie actually denotes, how much entropy it needs, and why the identifier and the record it points at have separate lifetimes. backend systems
- Jan 13, 2023 Cookie Scope and the Attributes That Restrict Sending How the Domain and Path attributes decide which requests carry a cookie, and how Secure, HttpOnly, and expiry constrain what can be done with it once stored. web platform