Glossary: Endpoint, Application and Email Security

Set-Cookie

Also written: Path, Expires, Max-Age

The response header a server uses to set a cookie and its attributes, such as Path=/, Secure, HttpOnly and SameSite. A cookie with no Expires or Max-Age is deleted when the browser closes.