The secure attribute for HTTP cookies is specified in RFC 2109 (http://tools.ietf.org/html/rfc2109). If a cookie is being used for authentication, web applications should usually set the secure attribute on it.
Most web browsers will only submit cookies with the secure attribute set over HTTPs.
All Comments