Content deleted Content added
Pleasancoder (talk | contribs) |
|||
Line 192:
==== Secure and HttpOnly ====
Secure and HttpOnly attributes do not have a value field. The existence of the attribute tells the browser whether the cookie is secure or httponly.
A Secure attribute tells the browser to only use this cookie via [[Https|secure/encrypted]] connections, obviously, web servers should also set this cookie via [[Https|secure channels]], and therefore anyone eavesdropping your communication would not pick up the cookie.
| |||