What's the purpose of 'at_check' cookie?

[#1]

Hey All,

Can you help me understand whats the purpose of at_check cookie? I'm seeing following details on my browser:

• Cookie name: at_check
• Cookie value: true
• Domain: .adobecqms.net
• Expires/Max-Age: Session

[digitaldarpan]

@Raghu_Kishore_R  This cookie is set based on if the visitor support cookies or not. This cookie was named from "check" to "at_check" in earlier versions of at.js

Details of all the Experience Cloud and Target cookies can be found here: https://experienceleague.adobe.com/docs/core-services/interface/ec-cookies/cookies-target.html?lang=...

Release notes for renaming of the cookie - https://github.com/AdobeDocs/target.en/blob/master/help/c-implementing-target/c-implementing-target-...

[digitaldarpan]

Hi Guys, Can i change the attribute of the cookie by Launch/At itself.

Vulnerability Category:
150121 Session Cookie (Authentication Related) Does Not Contain The "HTTPOnly" Attribute

150120 Session Cookie (Authentication Related) Does Not Contain The "secure" Attribute

According to the above comment received from audit, We want to add "HTTPOnly" and "secure" attribute to cookie.
Any suggestions are welcome. Thanks in advanced!

[Amelia_Waliany]

@digitaldarpan please re-post your Comment here as a Question here in the Community so that you can have a higher chance of receiving Answers from your peers and experts. Hope this helps and goodluck!