No. Providing the cookies are set with secure flag (https://www.owasp.org/index.php/SecureFlag https://www.owasp.org/index.php/SecureFlag), that will mean the

No. Providing the cookies are set with secure flag (https://www.owasp.org/index.php/SecureFlag https://www.owasp.org/index.php/SecureFlag), that will mean the browser won't send the cookie over http requests, only on https requests, and to answer the other comment below about 'JS snarfing', that is mitigated by setting the cookie as httpOnly (https://www.owasp.org/index.php/HTTPOnly https://www.owasp.org/index.php/HTTPOnly) which doesn't mean http vs https, it means not accessible via DOM JavaScript.