security - Setting Secure cookies when HTTPS (for mixed HTTPS/HTTP site) with JRun/ColdFusion -
We have a site running CF7 that uses jsessionid for both login and logout section and session Have done
When switching to HTTPS (for safe sections), we need to start a new secure session, on which the 'secure' flag is set on the jsessionid cookie.
While JRUN has 'safe' it seems to be a whole or a few bargain.
Is there a way to always use safe in HTTPS mode?
Related Questions:
This explanation looks completely completely. For some reason, this is not trivial.
12robots.com
Comments
Post a Comment