...
Warning |
---|
WARNING: Consider carefully the security risks of persistent cookies. |
Persistent Cookies
By default, SharePoint uses persistent cookies. The use of persistent cookies offers the richest and smoothest user experience at the expense of security. When persistent cookies are used, all Microsoft applications, including Internet Explorer and Office products, share the same authentication cookie. The result is that the user has to sign in only once. For example, if the user authenticates to SharePoint, an Office application will use the same cookie for authentication. Correspondingly, if the user signs out from SharePoint in Internet Explorer, the ongoing Office session is also terminated, resulting a warning "Connection lost to server".
...
Use of persistent cookies on shared desktop environments and for extranet users should be avoided.
Session Cookies
Session cookies hinder the user experience but provide additional security. In the case of session cookies, the user has to authenticate separately to each application that uses SharePoint. If the application is closed, the session within the specific application is terminated. Some features, for example Windows Explorer integration, does not work with session cookies.
A more specific evaluation of SharePoint 2013 session and persistent cookies is provided in the following Microsoft document: Implementing Persistent Cookies in SharePoint 2013 Products at http://www.microsoft.com/en-au/download/details.aspx?id=30447
Restrictions
Check browser compatibility against Microsoft SharePoint release notes.