Set-Cookie

Meaning

Set-Cookie is the HTTP response header a server uses to create or update one cookie in the browser. It carries the cookie's name and value, followed by optional attributes separated by semicolons. It matters because every rule about scope, lifetime and protection is declared here. A server that wants three cookies sends three separate Set-Cookie headers, never one comma-joined list. An example is Set-Cookie: sid=abc123; Path=/; Secure; HttpOnly. The browser later answers with the Cookie header, which holds no attributes. See also: Cookie header, Cookie attribute, Cookie jar, the guide "How the Set-Cookie and Cookie Headers Work".