Web Security · Junior · Question 46 of 75

What does the `Secure` cookie attribute do?

✓Correct answer: The browser sends the cookie only over HTTPS
2The cookie can't be changed by the server
3The cookie value is encrypted by the browser

Explanation

Without Secure, a session cookie could leak over an accidental HTTP request. Session cookies should always be Secure.

Further reading

Test yourself

Take the Web Security · Junior quiz: questions and options are shuffled, and you get a review of your mistakes at the end.