For the most part even that isn't even required. If a server sends your browser a cookie it's under no obligation to pass it back in the next request. I suppose you could argue that's a bit all or nothing and separating out essential vs everything else is potentially useful.
Comments
For the most part even that isn't even required. If a server sends your browser a cookie it's under no obligation to pass it back in the next request. I suppose you could argue that's a bit all or nothing and separating out essential vs everything else is potentially useful.