118 reputation
16
bio website none
location Russia
age 24
visits member for 2 years
seen Sep 19 '13 at 12:55

noob


Dec
10
comment cookies “secure” flag
i have the last question(s): does browser send cookies to the server?
Dec
6
comment cookies “secure” flag
From your words cookies should be created at client-side in both cases -- and that's the reason i ask the previous question.
Dec
6
comment cookies “secure” flag
i have something like: client <--HTTPS--> load balancher <--HTTP--> server. If i configure server to set secure attribute in cookie and tries to login -- cookies are not created on the client side. If i make server to set cookie without secure flag -- they are created on client side.
Dec
6
comment cookies “secure” flag
"After '2' the browser will have the cookie..." sorry, but are you sure? Can you, please, give some examples or proofs?
Dec
6
comment cookies “secure” flag
in case only browser send cookies to server, where the browser get those cookies from?
Dec
6
comment cookies “secure” flag
The question is not about redirection but to know who is responsible for blocking cookies with secure attribute of being sent from server back to client? (i know that browser is the one to manage that on "client->server" request)
Dec
6
comment cookies “secure” flag
that's great to know. And talking about htaccess where can that be defined? (Sorry for my English)
Dec
6
comment cookies “secure” flag
so it's the server who decides, to sent or not, "secure" cookie over HTTP conenction back to client? And theoretically we can force server to send back "secure" cookies over HTTP connection?
Dec
6
comment cookies “secure” flag
in other words, will we have cookie with "secure" flag in our browser when trying that flow with logging in i've described above?
Dec
6
comment cookies “secure” flag
so if browser ask server to include cookies with "secure" flag over HTTP connection, the server will have sent cookies with "secure" flag to browser?