Cookie Overly Broad Path Detected

[Alexandre Machado]

Ask these auditors if they use gmail themselves. Ask them if they think that gmail is "unsafe".

GMail also uses a root wide session cookie:

   

Not one, actually, but DOZENS. All using the root path, in multiple google domains.