I think this is what it hinges on: http://scarybeastsecurity.blogspot.com.es/2008/11/cookie-forcing.html http://scarybeastsecurity.blogspot.com.es/2008/11/cook

I think this is what it hinges on: http://scarybeastsecurity.blogspot.com.es/2008/11/cookie-forcing.html http://scarybeastsecurity.blogspot.com.es/2008/11/cookie-for... Is that possible under HSTS?