Our application firewall blocks requests if it detects a cookie is present with a value greater than 1024 characters in size.
Are there any exploits involving large cookies?
i.e. How much more secure is restricting cookie size to 1024 rather than say 2048 characters.
What are the security implications of allowing unlimited (browser maximum) size cookies?