Browser & Web Performance · Junior · Question 66 of 75

What does the `Secure` flag on a cookie do?

1The cookie is encrypted in the browser
2The cookie can't be read by the server
✓Correct answer: The cookie is sent only over HTTPS

Explanation

It stops the cookie from leaking over plain HTTP. SameSite=None cookies must also be Secure.

Further reading

MDN: Set-Cookie (HttpOnly, SameSite) ↗

Test yourself

Take the Browser & Web Performance · Junior quiz: questions and options are shuffled, and you get a review of your mistakes at the end.