SSL interactions and localStorage - which one looks closer to what cookies do? Ok we can reconsider problem without SSL part. There are two http apps under diff

SSL interactions and localStorage - which one looks closer to what cookies do? Ok we can reconsider problem without SSL part. There are two http apps under different ports. If second is hacked it can get httponly cookies of first. Very simple threat. SSL design is more high level, of course they can not use origins. But it doesn't prove that cookies are ok