[galdor]

> Google runs some very sensitive applications for paying enterprise customers, and they still tend to not expire sessions.

For Google Workspace, web applications (e.g. Gmail or Calendar) will regularly force you to re-authenticate "for your security". It's not a daily thing fortunately, but it is common enough to be frustrating.

[nightpool]

Session expiration length is a configurable setting by the domain admin, it's not enabled by default.

[ghiculescu]

Oh is that why it asks for re-auth all the time? I thought it was built in. Nice, I’m going to disable that.