sptoolkit/sptoolkit — Issue #18: Secure flag for cookie
Author: 42spt
Created: 2012-02-25 17:24:19+00:00
State: open
Labels: 0.7

Bitbucket issue #26.

For when SSL is supported, the Secure flag should be set in the cookies for PHPSESSID.

Would need someplace to configure this. Settings Module?

References: http://www.enablesecurity.com/blog/2008/8/29/setting-the-secure-flag-in-the-cookie-is-easy.html

http://en.wikipedia.org/wiki/HTTP_cookie#Secure_and_HttpOnly