Expires vs max-age, which one takes priority if both are declared in a HTTP response?

Question

If a HTTP response that returns both Expires and max-age indications which one is used?

Cache-Control: max-age=3600
Expires: Tue, 15 May 2008 07:19:00 GMT
         


        

Answer 1

But what does the rfc-6265 spec say like this?

A cookie is "expired" if the cookie has an expiry date in the past.


Finally, to remove a cookie, the server returns a Set-Cookie header
with an expiration date in the past.