Stephen Miles Azure Security Cookbook May 2026

Mandatory (Essential) Cookies

These cookies are strictly necessary for the site to function or to provide a service you have explicitly requested. They are set without requiring consent under applicable law.

Cookie	Purpose	Typical Expiry
`.AspNetCore.Antiforgery.*`	Protects forms against CSRF attacks	End of session
`.AspNetCore.Session`	Maintains anonymous session state (e.g. preferences)	Session
`.AspNetCore.Cookies`	Authentication (when you log into secure areas)	Up to 14 days (or until logout)
`country`	Stores selected country for content localisation	1 year
`cookie_consent`	Stores your consent choice (required to honour it)	6 months

No advertising or social media tracking cookies are loaded unless you choose 'Accept all cookies'. Analytics cookies (GA4) are only set after you consent. Embedded YouTube videos use privacy‑enhanced mode (youtube‑nocookie.com) so no YouTube cookies are set until you play a video.