the language in the language cookie the language that the browser says its user prefers It uses the django built in capabilities for this. By default no session and cookie are set. If you want to enable enable this use the cms.middleware.language.LanguageCookieMiddleware to set the cookie on every request. How django CMS determines what language to serve Once it has identified a user’s language, it will try (when multilingual URLs are enabled) language stored in the browsing session language stored in a cookie from a previous session language requested by the browser in the Accept-Language header the default

every service: mTLS to defend against data exfiltration; deny by default. Credential (token, cookie, etc) 2. Exchange external credential to internal token to defend against token replay attacks