Cookies, Sessions, and Authentication Basics

A cookie has no Expires and no Max-Age attribute. What is its lifetime?

• AIt's permanent, stored forever
• BIt's a session cookie, deleted when the browser process exits (or, for a scraper, when the in-memory cookie jar is discarded)
• CIt expires after exactly 24 hours
• DThe server decides the expiry server-side via session state