Configuring Secure Session Cookies

When using HTTPS, mark all your cookies as secure, which means they are only transmitted over HTTPS protocols.

This flag is useful for sites that allow both HTTPS and HTTP traffic, since it protects from HTTP redirection carrying session cookies across unencrypted connections.

To Configure the Secure Flag

  1. Log in to the AM console as an administrative user, for example, amAdmin.

  2. Navigate to Configure > Server Defaults > Security > Cookie.

  3. Enable the Secure Cookie switch, and save your changes.

  4. Restart AM or the container where it runs.

Read a different version of :