How to tell if cookies are disabled

Hi,

 

 

I don't believe that the client ever sends the expiration or max-age in a request. I think the server will send it in the set-cookie header in the response to the client. The server is telling the client how long the cookie is valid for. The client wouldn't need to tell the server how long it's going to continue presenting the cookie for by including the expiration time in the request.

 

 

Are you sure you're seeing the expiration time in the request? To be certain, I'd try capturing a tcpdump.

 

 

Out of curiosity, why are trying to log the expiration time?

 

 

Aaron