In our company we are using a tool for saving user profile data (like desktop settings, internet settings, cookies, etc.) into a database. During the annual cleanup of this database I discovered that lots of users have cookies, which are older than two years.
This leads me to the question: is it reasonable to block Cookies completely company-wide?
Do some security issues exists that support this idea, i.e. pros?