title: Session Timeout & Sliding Timeout
body: <p>I am implementing Identityserver where sliding expiration value is set at client side. So is it secure?</p>
  
  <p>Does asp.net session timeout work in similar way? i.e. client side comparison?</p>
  
  <p>Just need theory about whether session timeout is client side thing or server side thing.</p>
  
  <p>What exactly happens when session timeout. Cookie clear or any server value clear?</p>