4 ms·Er, can’t you just specify that the session cookie is only sent over HTTPS?by alanh 16y agoEr, can’t you just specify that the session cookie is only sent over HTTPS?